Chewing_Bever/rusty-bever
Archived
1
0
Fork 1
Code Issues 41 Pull requests 1 Projects Releases Activity

Don't allow deleted users to use valid JWT #31

New issue
Open
opened 2021-08-30 09:33:12 +02:00 by Jef Roosens · 0 comments
Jef Roosens commented 2021-08-30 09:33:12 +02:00
Owner
Copy link

When a user is deleted, their JWT can still be valid for a few minutes. This allows them to log in using a non-existent account, which is a big no no, so we gotta find something to fix this.

Probably related to #30.

When a user is deleted, their JWT can still be valid for a few minutes. This allows them to log in using a non-existent account, which is a big no no, so we gotta find something to fix this. Probably related to #30.
Jef Roosens added this to the (deleted) milestone 2021-08-30 09:33:12 +02:00
Jef Roosens added the
bug
Backend
 labels 2021-08-30 09:33:12 +02:00
Jef Roosens changed title from Do'nt allow deleted users to use valid JWT to Don't allow deleted users to use valid JWT 2021-08-30 09:37:12 +02:00
Jef Roosens removed this from the (deleted) milestone 2021-09-04 19:02:54 +02:00
Jef Roosens added the
Security
 label 2021-09-13 16:27:59 +02:00
This repository is archived. You cannot comment on issues.
No Branch/Tag specified
Branches Tags
develop
microservice-split
sections-backend
main
No results found.
Labels
Clear labels   
Backend

Issue related to the backend

  
Frontend

Issue related to the frontend

  
Idea

   
Post Idea

An idea for a blog post

  
Security

An issue regarding security

  
Upstream

Indicates this issue is blocked by upstream.

  
bug

Something is not working

  
duplicate

This issue or pull request already exists

  
enhancement

New feature

  
help wanted

Need some help

  
invalid

Something is wrong

  
wontfix

This won't be fixed

No labels
Backend
Frontend
Idea
Post Idea
Security
Upstream
bug
duplicate
enhancement
help wanted
invalid
wontfix
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: Chewing_Bever/rusty-bever#31
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?