acm-udayton / acm-udayton/ACM-Meeting-Records
[FEATURE] JWT - Revoke JWTs from admin dashboard
- Dominant language
- Python
- Stars
- 7
- Forks
- 2
- Avg merge
- 4d 23h
- Merged PRs (30d)
- 2
Description
## Feature Description
Add a convenient, easy-to-access tool for admins to be able to revoke JWTs for any user.
## Why It's Worth Implementing
Without a feature like this, any stolen JWT access or refresh tokens cannot easily be blocked if a user account is compromised.
---
## Acceptance Criteria & Solution Requirements
*To close this issue, the following must be met (can be finalized in the comments):*
- [ ] 1. Application runs as expected with the new feature integrated seamlessly.
- [ ] 2. Code quality metrics are maintained, and linting has been considered in development.
- [ ] 3. Testing metrics are maintained, and tests have been updated/added wherever relevant during development.
- [ ] 4. Documentation has been updated to reflect the changes made during development.
- [ ] 5. A new database table `revoked_jwts` has been added to store revoked JWT ids, as well as the time at which they were revoked.
- [ ] 6. A button has been added to the user management dashboard that immediately invalidates that user's access and refresh JWTs.
Contributor guide
Assessment
This issue has not been assessed yet.