Fix misleading token middleware documentation

Signed-off-by: Aleksandr Tsertkov <tsertkov@gmail.com>
2014-07-01 16:59:49 +02:00 · 2014-07-01 16:59:49 +02:00 · 476dd8214d
parent 6a8a918166
commit 476dd8214d
1 changed files with 3 additions and 3 deletions
--- a/lib/middleware/token.js
+++ b/lib/middleware/token.js
@ -15,9 +15,9 @@ module.exports = token;
 * Check for an access token in cookies, headers, and query string parameters.
 * This function always checks for the following:
 * 
- * - `access_token`
- * - `X-Access-Token`
- * - `authorization`
+ * - `access_token` (params only)
+ * - `X-Access-Token` (headers only)
+ * - `authorization` (headers and cookies)
 *
 * It checks for these values in cookies, headers, and query string parameters _in addition_ to the items
 * specified in the options parameter.