Skip to content

Commit

Permalink
feat: DEPR USE-JWT-COOKIE header - Part 1
Browse files Browse the repository at this point in the history
This repo is no longer using USE-JWT-COOKIE header,
since it has the required edx-drf-extensions>10.2.0,
where it was fully removed.

This removes all uses of the header, except updating
CORS_ALLOW_HEADERS, which can't be done before all
MFEs and other callers stop sending the header.

See "[DEPR]: USE-JWT-COOKIE header" for more details:
- openedx/edx-drf-extensions#371
  • Loading branch information
robrap committed Aug 29, 2024
1 parent 97d1871 commit 1bbd257
Showing 1 changed file with 1 addition and 5 deletions.
6 changes: 1 addition & 5 deletions docs/getting_started.rst
Original file line number Diff line number Diff line change
Expand Up @@ -119,11 +119,7 @@ To get a JWT role defined inside your cookie, do the following:
"enterprise_learner:{another-enterprise-uuid}",
"enterprise_openedx_operator:*"
]
#. Soon, you'll make a request to e.g. http://localhost:18160/api/v1/enterprise-catalogs/?format=json. Before you do this,
it's important that you can make the request with an additional header: ``use_jwt_cookie: true`` This tells
our auth middleware to "reconstitute" the JWT cookie header and signature into a single JWT from which auth, roles, etc.
can be fetched. You can do this in your browser using a tool like ModHeader, or with something like Postman.
#. Make the request. For the example endpoint above, you should get a response payload that looks like::
#. Make a request to e.g. http://localhost:18160/api/v1/enterprise-catalogs/?format=json. For this example endpoint, you should get a response payload that looks like::

{
"count": 2,
Expand Down

0 comments on commit 1bbd257

Please sign in to comment.