New post

I'm setting up a web application as CSP/ZEN to host a React SPA. SPA's typically need to use a fallback page to deal with server requests based on the browser route, unless you use hash routing in the browser code. Our requirements prevent us from using hash routing, so we need to deal with 404's - redirecting/fallback them to index.html - a very common practice. I 'think' IRIS uses Apache under the hood, so I tried adding a .htaccess in the applications root directory - which did not work. I found that CSP has an Error class,

0 2
0 308
Question
· Jul 25, 2023
2FA on REST API with JWT

I successfully setup a REST web application with JWT enabled, which is fantastic. My next configuration 'challenge' is to add 2FA to this REST app. First question first - is this possible with the OpenAPI generated /login? The end goal is to build out a SPA (React) using /login for the JWT and adding the Auth bearer token for api calls. I'd like to prevent the token generation until the 2FA is satisfied - or generate the token, but test if the 2FA is satisfied before allowing calls forward. Hope that's clear.

0 5
0 504