Merge pull request #45 from davisouzatb/patch-1

[feat] Implementado opção de HttpOnly para permitir setar token via Cookie
HashLoad · Dec 11, 2024 · 1662f42 · 1662f42
2 parents 8a9acf3 + 58b322f
commit 1662f42
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/src/Horse.JWT.pas b/src/Horse.JWT.pas
@@ -191,6 +191,9 @@ procedure Middleware(AHorseRequest: THorseRequest; AHorseResponse: THorseRespons
     LHeaderNormalize[1] := UpCase(LHeaderNormalize[1]);
 
   LToken := AHorseRequest.Headers[LConfig.Header];
+  if LToken.IsEmpty then
+    LToken := AHorseRequest.Cookie.Items[LConfig.Header];
+
   if LToken.Trim.IsEmpty and not AHorseRequest.Query.TryGetValue(
     LConfig.Header, LToken) and not AHorseRequest.Query.TryGetValue(
     LHeaderNormalize, LToken) then