dwyl/learn-json-web-tokens

how to revoke tokens

Open

#85 创建于 2019年1月2日

在 GitHub 查看
 (0 评论) (1 反应) (0 负责人)JavaScript (4,175 star) (267 fork)batch import
enhancementhelp wantedquestion

描述

add information about how you should / could revoke tokens, for example if the user asks to get logged out, even more complicate if the user logs in using his browser and requests to get logged out on his phone or tablet because it got stolen

贡献者指南

技术栈
javascriptnodejs
领域
documentationauthentication
议题类型
documentation
难度面向新贡献者的预计实现难度，1 表示很小改动，5 表示专家级工作。
2
预计时间有经验贡献者完成调查、实现、测试并准备 pull request 的粗略时间范围。
1-3 hours
活动状态议题当前的可参与程度：新鲜、活跃、陈旧、阻塞或等待维护者输入。
stale
清晰度议题是否清楚说明期望改动、验收标准和下一步。
clear
前置要求
basic understanding of JWTs
新手友好度1-100 的估计分数，表示该议题对首次贡献者的友好程度。
85
研究方向
Investigate common approaches to token revocation such as using a blocklist or short lived tokens with refresh tokens. Look at the existing tutorial structure in the repository (e.g., README.md and any other documentation files) and add a new section explaining the pros and cons of each method. Reference resources like Auth0 or RFC standards for token revocation. Provide examples in JavaScript or Node.js.