acm-udayton / acm-udayton/ACM-Meeting-Records

[FEATURE] JWT - Revoke JWTs from admin dashboard

Open
#155 0 comments 0 reactions 0 assignees View on GitHub
enhancement
Dominant language
Python
Stars
7
Forks
2
Avg merge
4d 23h
Merged PRs (30d)
2

Description

## Feature Description

Add a convenient, easy-to-access tool for admins to be able to revoke JWTs for any user.

## Why It's Worth Implementing

Without a feature like this, any stolen JWT access or refresh tokens cannot easily be blocked if a user account is compromised.

---

## Acceptance Criteria & Solution Requirements
*To close this issue, the following must be met (can be finalized in the comments):*
- [ ] 1. Application runs as expected with the new feature integrated seamlessly.
- [ ] 2. Code quality metrics are maintained, and linting has been considered in development.
- [ ] 3. Testing metrics are maintained, and tests have been updated/added wherever relevant during development.
- [ ] 4. Documentation has been updated to reflect the changes made during development.
- [ ] 5. A new database table `revoked_jwts` has been added to store revoked JWT ids, as well as the time at which they were revoked.
- [ ] 6. A button has been added to the user management dashboard that immediately invalidates that user's access and refresh JWTs.

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.