Make sure blocked users tokens aren't valid anymore #30

Open
opened 2021-08-30 09:26:46 +02:00 by Jef Roosens · 0 comments
Owner

Right now, we just read the JWT & check if it's been expired, but this doesn't account for users that have been blocked but still have some time left on their token.

Maybe we can keep a store in memory that handles these edge cases? A database operation would be too expensive imo every time we check a JWT.

Right now, we just read the JWT & check if it's been expired, but this doesn't account for users that have been blocked but still have some time left on their token. Maybe we can keep a store in memory that handles these edge cases? A database operation would be too expensive imo every time we check a JWT.
Jef Roosens added this to the (deleted) milestone 2021-08-30 09:26:46 +02:00
Jef Roosens added the
bug
Backend
labels 2021-08-30 09:26:46 +02:00
Jef Roosens removed this from the (deleted) milestone 2021-09-04 19:03:07 +02:00
Jef Roosens added the
Security
label 2021-09-13 16:27:59 +02:00
This repository is archived. You cannot comment on issues.
No milestone
No project
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Chewing_Bever/rusty-bever#30
No description provided.