acm-udayton / acm-udayton/ACM-Meeting-Records
[FEATURE] JWT - Revoke JWTs from admin dashboard
- 主要言語
- Python
- スター
- 7
- フォーク
- 2
- 平均マージ
- 4日 23時間
- マージ済み PR(30日)
- 2
説明
## Feature Description
Add a convenient, easy-to-access tool for admins to be able to revoke JWTs for any user.
## Why It's Worth Implementing
Without a feature like this, any stolen JWT access or refresh tokens cannot easily be blocked if a user account is compromised.
---
## Acceptance Criteria & Solution Requirements
*To close this issue, the following must be met (can be finalized in the comments):*
- [ ] 1. Application runs as expected with the new feature integrated seamlessly.
- [ ] 2. Code quality metrics are maintained, and linting has been considered in development.
- [ ] 3. Testing metrics are maintained, and tests have been updated/added wherever relevant during development.
- [ ] 4. Documentation has been updated to reflect the changes made during development.
- [ ] 5. A new database table `revoked_jwts` has been added to store revoked JWT ids, as well as the time at which they were revoked.
- [ ] 6. A button has been added to the user management dashboard that immediately invalidates that user's access and refresh JWTs.
コントリビューションガイド
評価
この issue はまだ評価されていません。