Skip to content

Instantly share code, notes, and snippets.

@azaroth42

azaroth42/workflow.md

Created October 25, 2016 13:03
Show Gist options
  • Star 0 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save azaroth42/66b47bdced37bc4c7cb9927a89f63feb to your computer and use it in GitHub Desktop.
Save azaroth42/66b47bdced37bc4c7cb9927a89f63feb to your computer and use it in GitHub Desktop.
Download ZIP
Raw
workflow.md

Workflow

  1. Request full/info.json withCredentials flag set, but no credentials Request: No Cookie. Response: 302 ; ACAC:true ; ACAO: origin ; Location: degraded

  2. Request degraded/info.json withCredentials flag set? but no credentials Request: No Cookie Response: 200 ; ACAC:true ; ACAO: origin

  3. Request service/login withCredentials flag set, but no credentials Request: No control for login ... Magic Happens ... Window closes maybe having acquired a Cookie

  4. Request full/info.json withCredentials flag set, and maybe credentials

    4a Request: Cookie Response: 200 ; ACAC:true ; ACAO: origin

    4b Request: No Cookie Response: 302 ; ACAC:true ; ACAO: origin

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment