acm-udayton / acm-udayton/ACM-Meeting-Records

[FEATURE] JWT - Revoke JWTs from admin dashboard

Aperta
#155 0 commenti 0 reazioni 0 assegnatari Vedi su GitHub
enhancement
Lingua principale
Python
Stelle
7
Fork
2
Merge medio
4g 23h
PR unite (30g)
2

Descrizione

## Feature Description

Add a convenient, easy-to-access tool for admins to be able to revoke JWTs for any user.

## Why It's Worth Implementing

Without a feature like this, any stolen JWT access or refresh tokens cannot easily be blocked if a user account is compromised.

---

## Acceptance Criteria & Solution Requirements
*To close this issue, the following must be met (can be finalized in the comments):*
- [ ] 1. Application runs as expected with the new feature integrated seamlessly.
- [ ] 2. Code quality metrics are maintained, and linting has been considered in development.
- [ ] 3. Testing metrics are maintained, and tests have been updated/added wherever relevant during development.
- [ ] 4. Documentation has been updated to reflect the changes made during development.
- [ ] 5. A new database table `revoked_jwts` has been added to store revoked JWT ids, as well as the time at which they were revoked.
- [ ] 6. A button has been added to the user management dashboard that immediately invalidates that user's access and refresh JWTs.

Guida per i contributori

Apri la guida per i contributori

Direzione di ricerca

The issue requires adding a new database table `revoked_jwts` and integrating revocation logic into the admin dashboard. Start by examining the existing authentication flow, likely in a module like `auth.py` or `jwt_utils.py`. Look for the user management dashboard templates and backend routes to understand where to add the revocation button. Check how JWTs are currently validated and where to add a check against the revocation list. 'Done' means the button works, tokens are invalidated, and the new table stores revocation records.

Scritto dal modello di indicizzazione a partire dal testo della issue.

Valutazione

Stack tecnologico
python
Ambito
authentication, backend, security
Tipo di issue
Funzionalità
Difficoltà
4/5
Tempo stimato
3-5 giorni
Stato di attività
Tranquilla
Chiarezza
Abbastanza chiara
Idoneità per principianti
45/100

Ricevi le nuove issue nella tua casella

Un breve riepilogo di issue GitHub adatte ai principianti.