- Notifications
You must be signed in to change notification settings - Fork 818
Closed
Labels
BugAn error, flaw, misbehavior or failure in the Monkey or Monkey Island.An error, flaw, misbehavior or failure in the Monkey or Monkey Island.Complexity: HighImpact: HighSecurity
Milestone
Description
Describe the bug
It seems that authentication tokens are not invalidated/revoked on logout (server-side). This could allow a token to be reused after logout.
Tasks
- Add a function to the
AuthenticationServicethat revokes all of user's tokens and call it from the endpoint (0.75d) - @VakarisZ
Reactions are currently unavailable
Metadata
Metadata
Assignees
Labels
BugAn error, flaw, misbehavior or failure in the Monkey or Monkey Island.An error, flaw, misbehavior or failure in the Monkey or Monkey Island.Complexity: HighImpact: HighSecurity