hasura / hasura/graphql-engine

Should treat JWTExpired as unauthoried

Open
#9,650 0 comments 1 reaction 0 assignees View on GitHub
k/bug t/gql-services
Dominant language
TypeScript
Stars
32.1k
Forks
3k
PR merge metrics
PR metrics pending

Description

### Version Information

Server Version: 2.25
CLI Version (for CLI related issue):

### Environment

OSS

### What is the current behaviour?

Allowed anonymous for remote schema auth mutation, but Expired token cause the JWTExpired, the auth request not reach the remote schema, can not auth to get the new token.

### What is the expected behaviour?

Consider the Expired token as no token

### How to reproduce the issue?

Pass Expired token

### Screenshots or Screencast

With Expired

image

With nothing

image

### Please provide any traces or logs that could help here.

### Any possible solutions/workarounds you're aware of?

Client check the expire, do not pass the expired token.

### Keywords

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.