Skip to content

Revoke tokens on logout #3138

@mssalvatore

Description

@mssalvatore

Describe the bug

It seems that authentication tokens are not invalidated/revoked on logout (server-side). This could allow a token to be reused after logout.

Tasks

  • Add a function to the AuthenticationService that revokes all of user's tokens and call it from the endpoint (0.75d) - @VakarisZ

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions