httponly

Passwordless Authentication of User in Node(express) and React using JWT and Twilio SMS API without and any database for validating OTP

Demonstrating exploitation of missing HTTP cookie flags

🔐 JWT Auth system using Access + Refresh Tokens with blacklist support on logout. Includes protected routes, httpOnly cookies, and token refresh logic using MongoDB and Express.

my MERN stack auth boilerplate

Audit Set-Cookie headers: missing Secure/HttpOnly/SameSite, __Host-/__Secure- prefix violations, broad Domain, long expiry, cookies over HTTP, JWTs and emails in values, with a fix for each. Text, JSON, SARIF, Markdown; GitHub Action. Zero deps.

Audit Set-Cookie headers for Secure, HttpOnly, SameSite, prefixes, expiry, domain, and third-party cookie issues.

httpOnly cookie based authentication with next.js API route

Secure backend authentication API using HttpOnly cookies with JWT, built on Node.js, Express, and MongoDB.

Secure backend authentication API implementing access token and refresh token flow with HttpOnly cookies using Node.js, Express, and MongoDB.

Backend API for newsletter subscribe, unsubscribe, and subscriber listing using Node.js, Express, MongoDB, JWT authentication, and HttpOnly cookies.

Secure backend API for task manager CRUD with status, priority, due date, and user ownership using Node.js, Express, MongoDB, JWT, and HttpOnly cookies.

Secure backend API for a personal bookmark manager with JWT authentication, HttpOnly cookies, user-owned bookmarks, tags, categories, and favorites using Node.js, Express, and MongoDB.

Secure backend API for user profile management, password updates, and account settings using JWT and HttpOnly cookies with Node.js, Express, and MongoDB.

🍪 Sync browser cookies (incl. HttpOnly) + localStorage tokens into a secret store via a Chrome extension + native host. Pluggable backends; auto-refresh expiring browser-session tokens for CLIs.

## Step 19 Repo description: ```text Secure backend API for contact form submissions and admin read panel using Node.js, Express, MongoDB, JWT, and HttpOnly cookies.

Secure backend API for personal notes CRUD with user ownership using Node.js, Express, MongoDB, JWT, and HttpOnly cookies.