coder / coder/coder-jetbrains-toolbox
feat(oauth2): Add support for revoking access/tokens for the client app
Open
Feature
- Dominant language
- Kotlin
- Stars
- 23
- Forks
- 7
- Avg merge
- 3d 12h
- Merged PRs (30d)
- 10
Description
Token revocation is opt-in. [RFC 7009](https://datatracker.ietf.org/doc/html/rfc7009) defines a token revocation endpoint that authorization servers can implement. Coder server implements the RFC we can explicitly revoke the refresh and access token on logout.
A simple implementation can always revoke all the tokens. A more flexible approach allows users to configure whether or not the tokens will be invalidated upon logout
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.