Viewing profile — 1337badger

I am referring to the application you are writing

It really depends, it will purge on browser close yes but it still allows access that make not have been intended by your application for use by others also the refresh token may a…

Usually the token kept in memory is one distributed by the application and is not that which the services send back. This allows greater restriction on actions and make it far easi…

From what I gather you are leaving the api_tokens for the services in local memory. This means that the user or anyone else that can get there hands on the token can act on the ser…

This is a terrible idea that is full of security holes! If you can call having paper-thin pseudo security a hole.