public/librenotes
1
0
Fork 0
Code Issues 37 Pull Requests Actions Packages Projects Releases Wiki Activity

Add auth token handling to frontend API calls #14

New Issue
Open
opened 2026-02-25 16:05:14 +01:00 by libretech · 0 comments
libretech commented 2026-02-25 16:05:14 +01:00
Owner
Copy Link

Summary

Modify all frontend API calls to include JWT auth tokens and handle authentication errors gracefully.

Implementation Tasks

  • Store JWT token after successful magic link authentication
  • Add Authorization header to all API requests
  • Handle 401 responses (redirect to login)
  • Handle token expiration (refresh or re-authenticate)
  • Clear token on logout

Security Considerations

  • Store token in memory or httpOnly cookie (not localStorage for XSS protection)
  • Clear token on tab close if using memory storage
  • Handle CORS correctly for API requests

Acceptance Criteria

  • All API calls include valid auth token
  • 401 responses trigger re-authentication flow
  • Token is stored securely
  • Logout clears authentication state
## Summary Modify all frontend API calls to include JWT auth tokens and handle authentication errors gracefully. ## Implementation Tasks - [ ] Store JWT token after successful magic link authentication - [ ] Add Authorization header to all API requests - [ ] Handle 401 responses (redirect to login) - [ ] Handle token expiration (refresh or re-authenticate) - [ ] Clear token on logout ## Security Considerations - Store token in memory or httpOnly cookie (not localStorage for XSS protection) - Clear token on tab close if using memory storage - Handle CORS correctly for API requests ## Acceptance Criteria - [ ] All API calls include valid auth token - [ ] 401 responses trigger re-authentication flow - [ ] Token is stored securely - [ ] Logout clears authentication state
libretech added the
phase-2
 label 2026-02-25 16:05:14 +01:00
libretech added the
task
 label 2026-02-28 20:26:11 +01:00
libretech added the
frontend
security
 labels 2026-02-28 22:00:42 +01:00
Sign in to join this conversation.
No Branch/Tag Specified
Branches Tags
Labels
Clear labels
backend
Backend changes
database
Database changes
documentation
Documentation improvements
epic
frontend
Frontend changes
infrastructure
Infrastructure and deployment
launch
Launch and release tasks
phase-0
phase-1
phase-2
phase-3
phase-4
phase-5
phase-6
security
Security-related
task
Actionable task
No Label
frontend
phase-2
security
task
Milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
libretech
No Assignees
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: public/librenotes#14
No description provided.
Delete Branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?