DevByDJ / DevByDJ/Node-Server-Jest

Adding a Expiration to JWT

Open
#8 0 comments 0 reactions 1 assignee Claimed by @DevByDJ View on GitHub
enhancement
Dominant language
JavaScript
Stars
0
Forks
0
PR merge metrics
No merged PRs in 30d

Description

# ISSUE
JSON Web Tokens (JWT) are used to maintain user authentication throughout the web application. However, not having an expiration on JWTs can pose a security risk, as attackers can potentially use a compromised token for an extended period. To address this issue, it is essential to add an expiration to JWTs to limit their validity.

# FIX
To implement this fix, set the "exp" claim of the JWT payload to a specific time in the future, typically a few hours or days from the time of creation. Once the token has expired, users will be required to reauthenticate, ensuring that any expired tokens become invalid after a short period.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.