-
Notifications
You must be signed in to change notification settings - Fork 807
Closed
Labels
BugAn error, flaw, misbehavior or failure in the Monkey or Monkey Island.An error, flaw, misbehavior or failure in the Monkey or Monkey Island.Complexity: HighImpact: HighSecurity
Milestone
Description
Describe the bug
It seems that authentication tokens are not invalidated/revoked on logout (server-side). This could allow a token to be reused after logout.
Tasks
- Add a function to the
AuthenticationService
that revokes all of user's tokens and call it from the endpoint (0.75d) - @VakarisZ
Metadata
Metadata
Assignees
Labels
BugAn error, flaw, misbehavior or failure in the Monkey or Monkey Island.An error, flaw, misbehavior or failure in the Monkey or Monkey Island.Complexity: HighImpact: HighSecurity