JWT shouldn't be stored in cachedir about dokuwiki HOT 3 OPEN

I agree, placing tokens in the cache dir might not be ideal. A PR for moving them to the meta dir as suggested would be welcome.

from dokuwiki.

Wouldn't it be easier to amend the instructions to omit the token files from being deleted by overzealous admins doing spring cleaning? This is not exactly an issue that the average DokuWiki user or even admin encounters.

And I would not consider this to be a Bug either because deleting files in the cache directory is not a normal DokuWiki operation. Possibly a feature request.

2024-03-14a "Kaos"

Very creative but non-existent. ;-)

from dokuwiki.

2024-03-14a "Kaos"

Very creative but non-existent. ;-)

Oops. my bad.

I agree normally nobody has to manually clean the cache, and this is not a normal DW operation. But, pages, meta, attic files are not stored in the cache directory for a reason, that's not their place. I mean, a cache directory is usually for cache files, not long lived authentication files. In some situation, one might want to quickly remove the cache because of a cluttered system, and loose their JWT files, which might, or not, be a problem.

Anyway, it's for you to decide if this is a bug or not.

Thanks for the reply on a Saturday.

from dokuwiki.