Changes & Additions

OAuth2, Local Scheme & Inheritances

• The token and refreshToken property for the scheme includes an httpOnly property that will enable the httpOnly flag on the token and fresh token cookies. This option is disabled by default. (In a later version it will be enabled by default)

• All schemes (custom & built-in) will use a serverHandler if ssr is available to manage the creation of httpOnly cookies and authorization.

• A reset serverHandler has been added to handle the deletion of the httpOnly cookies when logging out/using the reset function

nuxt-alt/http

• A event.$http nitro plugin has been added which works similar to what event.$fetch does, the difference being that it inherits the options of the http module.
• Fixed issue where using $http in nitro would lead to a fetch error.