Appocore 2.4 — Session security & access control
A set of security and access-control improvements: sessions that don't drop, precise permissions, and live data.
Until now, when an access token expired the user was simply logged out. Appocore now silently refreshes the expiring token ahead of time over OAuth 2.0, and tokens are short-lived — so your users are no longer kicked out mid-work, and the platform is meaningfully safer: a stolen token quickly becomes useless.
Access control got more precise: permission checks now consider several roles and rights at once, and each screen hides the blocks a user isn't allowed to see before they even render. Data came alive too — a realtime channel over WebSockets pushes changes to the screen without a manual refresh.
Integrations: OAuth 2.0
Ready to get started?
Explore the plans and pick the license that fits your project.
Related articles
2.16Appocore 2.16 — Effortless uploads & a new sign-in
An update that made the product handier in the small things and smarter on the way in.
web 2.1A blog for the Appocore website
The website gained a real blog engine.
2.15Appocore 2.15 — Reliable uploads & a faster admin
An update about the stability of heavy operations and the speed of everyday work.
