benawad / benawad/jwt-auth

Refresh token invalidation after refreshing an access token

Open
#3 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
TypeScript
Stars
50
Forks
13
PR merge metrics
No merged PRs in 30d

Description

// token has been invalidated
if (!user || user.count !== data.count) {
return next();
}

const tokens = createTokens(user);

Should we increment the count everytime before we refreshing new tokens?
Since refresh token lives longer and there would be many Live refresh tokens out there with the same count.

Since one year has passed, did you come up better solution for token invalidation? I'm coming from your YT channel and I love your content btw.

Contributor guide

No contributing guide indexed for this repository

Research direction

Start by locating the TypeScript entry points corresponding to the shown count comparison and createTokens(user) call; the issue names no files or tests. Clarify the intended invalidation behavior for multiple live refresh tokens before choosing an approach. Done means the agreed behavior is implemented and verified with appropriate authentication tests.

Written by the indexing model from the issue text.

Assessment

Tech stack
typescript
Domain
authentication, security
Issue type
Feature
Difficulty
5/5
Estimated time
Over a week
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
25/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.