Make sure blocked users tokens aren't valid anymore #30
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Right now, we just read the JWT & check if it's been expired, but this doesn't account for users that have been blocked but still have some time left on their token.
Maybe we can keep a store in memory that handles these edge cases? A database operation would be too expensive imo every time we check a JWT.