Florent Vilmart 45a9d50110 Skip authData validation if it hasn't changed. (#3783) ...

* Adds test for the new feature

* Re-validate authData only if mutated

- In case of short-lived tokens (like facebook) this will allow clients to be lax with asking users to re-login

2017-05-07 12:55:30 -04:00

12 KiB

Raw Blame History

View Raw