Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Block access if the token is revoked (but not expired) #203

Open
bashir2 opened this issue Nov 3, 2023 · 0 comments
Open

Block access if the token is revoked (but not expired) #203

bashir2 opened this issue Nov 3, 2023 · 0 comments
Labels
bug Something isn't working P2:should An issue to be addressed in a quarter or so.

Comments

@bashir2
Copy link
Collaborator

bashir2 commented Nov 3, 2023

Currently we only check the validity of an access token by verifying its signature and expiry time. But we should also check the token introspection endpoint of the authorization server, e.g., to figure out if the token is revoked.
@bashir2 bashir2 added bug Something isn't working P2:should An issue to be addressed in a quarter or so. labels Nov 3, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
bug Something isn't working P2:should An issue to be addressed in a quarter or so.
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@bashir2