acm-udayton / acm-udayton/ACM-Meeting-Records

[FEATURE] JWT - Revoke JWTs from admin dashboard

オープン
#155 コメント 0 件 リアクション 0 件 担当者 0 名 GitHub で見る
enhancement
主要言語
Python
スター
7
フォーク
2
平均マージ
4日 23時間
マージ済み PR(30日)
2

説明

## Feature Description

Add a convenient, easy-to-access tool for admins to be able to revoke JWTs for any user.

## Why It's Worth Implementing

Without a feature like this, any stolen JWT access or refresh tokens cannot easily be blocked if a user account is compromised.

---

## Acceptance Criteria & Solution Requirements
*To close this issue, the following must be met (can be finalized in the comments):*
- [ ] 1. Application runs as expected with the new feature integrated seamlessly.
- [ ] 2. Code quality metrics are maintained, and linting has been considered in development.
- [ ] 3. Testing metrics are maintained, and tests have been updated/added wherever relevant during development.
- [ ] 4. Documentation has been updated to reflect the changes made during development.
- [ ] 5. A new database table `revoked_jwts` has been added to store revoked JWT ids, as well as the time at which they were revoked.
- [ ] 6. A button has been added to the user management dashboard that immediately invalidates that user's access and refresh JWTs.

コントリビューションガイド

コントリビューションガイドを開く

評価

この issue はまだ評価されていません。

新しい issue をメールで受け取る

初心者向けの GitHub issue を短くまとめたダイジェスト。