Chewing_Bever
/
rusty-bever
Archived
1
0
Fork 1
Code Issues 41 Pull Requests 1 Projects Releases Activity

Don't allow deleted users to use valid JWT #31

New Issue
Open
opened 2021-08-30 07:33:12 +00:00 by Jef Roosens · 0 comments
Jef Roosens commented 2021-08-30 07:33:12 +00:00
Owner

When a user is deleted, their JWT can still be valid for a few minutes. This allows them to log in using a non-existent account, which is a big no no, so we gotta find something to fix this.

Probably related to #30.

When a user is deleted, their JWT can still be valid for a few minutes. This allows them to log in using a non-existent account, which is a big no no, so we gotta find something to fix this. Probably related to #30.
Jef Roosens added this to the (deleted) milestone 2021-08-30 07:33:12 +00:00
Jef Roosens added the
bug
Backend
 labels 2021-08-30 07:33:12 +00:00
Jef Roosens changed title from Do'nt allow deleted users to use valid JWT to Don't allow deleted users to use valid JWT 2021-08-30 07:37:12 +00:00
Jef Roosens removed this from the (deleted) milestone 2021-09-04 17:02:54 +00:00
Jef Roosens added the
Security
 label 2021-09-13 14:27:59 +00:00
This repo is archived. You cannot comment on issues.
No Branch/Tag Specified
Branches Tags
microservice-split
develop
sections-backend
main
Labels
Clear labels   
Backend

Issue related to the backend   
Frontend

Issue related to the frontend   
Idea
   
Post Idea

An idea for a blog post   
Security

An issue regarding security   
Upstream

Indicates this issue is blocked by upstream.   
bug

Something is not working   
duplicate

This issue or pull request already exists   
enhancement

New feature   
help wanted

Need some help   
invalid

Something is wrong   
wontfix

This won't be fixed
No Label
Backend
Frontend
Idea
Post Idea
Security
Upstream
bug
duplicate
enhancement
help wanted
invalid
wontfix
Milestone
Clear milestone
No items
No Milestone
Projects
Clear projects
No project
Assignees
Clear assignees
No Assignees
1 Participants
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: Chewing_Bever/rusty-bever#31
There is no content yet.
Delete Branch "%!s(<nil>)"

Deleting a branch is permanent. Although the deleted branch may exist for a short time before cleaning up, in most cases it CANNOT be undone. Continue?