litestar-org/litestar

Enhancement: Revoke jwt token

Open

#2,118 opened on Aug 4, 2023

View on GitHub
 (1 comment) (3 reactions) (0 assignees)Python (550 forks)user submission
EnhancementGood First IssueHelp Wanted :sos:Security

Repository metrics

Stars
 (8,243 stars)
PR merge metrics
 (Avg merge 13h 27m) (26 merged PRs in 30d)

Description

Summary

Provide a mechanism to revoke a jwt token on /logout similar to flask-jwt-extended (https://flask-jwt-extended.readthedocs.io/en/stable/blocklist_and_token_revoking.html).

Basic Example

No response

Drawbacks and Impact

No response

Unresolved questions

No response

Contributor guide

Research direction
Investigate how flask jwt extended implements token revocation and propose a design for litestar's JWT middleware.
Tech stack
python
Domain
backendsecurity
Issue type
Feature
DifficultyEstimated implementation difficulty for a new contributor, from 1 for very small changes to 5 for expert-level work.
3
Estimated timeA rough time range for an experienced contributor to investigate, implement, test, and prepare a pull request.
1-2 days
Activity statusHow available the issue appears right now: fresh, active, stale, blocked, or waiting on maintainer input.
Active
ClarityHow clearly the issue explains the expected change, acceptance criteria, and next step.
Clear
Prerequisites
PythonJWT basics
Newbie friendlinessA 1-100 score estimating how approachable this issue is for first-time contributors.
65