acm-udayton / acm-udayton/ACM-Meeting-Records

[FEATURE] JWT - Revoke JWTs from admin dashboard

Abierto
#155 0 comentarios 0 reacciones 0 asignados Ver en GitHub
enhancement
Lenguaje dominante
Python
Estrellas
7
Forks
2
Merge medio
4 d 23 h
PR fusionados (30 d)
2

Descripción

## Feature Description

Add a convenient, easy-to-access tool for admins to be able to revoke JWTs for any user.

## Why It's Worth Implementing

Without a feature like this, any stolen JWT access or refresh tokens cannot easily be blocked if a user account is compromised.

---

## Acceptance Criteria & Solution Requirements
*To close this issue, the following must be met (can be finalized in the comments):*
- [ ] 1. Application runs as expected with the new feature integrated seamlessly.
- [ ] 2. Code quality metrics are maintained, and linting has been considered in development.
- [ ] 3. Testing metrics are maintained, and tests have been updated/added wherever relevant during development.
- [ ] 4. Documentation has been updated to reflect the changes made during development.
- [ ] 5. A new database table `revoked_jwts` has been added to store revoked JWT ids, as well as the time at which they were revoked.
- [ ] 6. A button has been added to the user management dashboard that immediately invalidates that user's access and refresh JWTs.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.