Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[BE/#412] access token 블랙리스트 도입 #416

Merged
merged 5 commits into from
Dec 9, 2023
Merged

[BE/#412] access token 블랙리스트 도입 #416

merged 5 commits into from
Dec 9, 2023

Conversation

koomin1227
Copy link
Member

이슈

체크리스트

  • 로그아웃 시 블랙리스트에 등록

고민한 내용

  • 로그아웃시 해당 엑세스 토큰을 블랙리스트에 적용함
  • 로그아웃시 registration token 삭제도 같이 일어나기 때문에 가드를 적용해서 유효한 엑세스 토큰을 가진 요청만 삭제되도록 수정
    • 가드가 없으면 만료된 jwt로 악의적으로 사용자의 registration token을 삭제 할 수 있기 때문

스크린샷

@koomin1227 koomin1227 requested a review from namewhat99 December 9, 2023 10:58
@koomin1227 koomin1227 self-assigned this Dec 9, 2023
@namewhat99 namewhat99 merged commit 75d666f into BE Dec 9, 2023
1 check passed
@namewhat99 namewhat99 deleted the BE-ChangePushName-#412 branch December 9, 2023 11:02
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@namewhat99 namewhat99 namewhat99 approved these changes

Assignees

@koomin1227 koomin1227

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.
2 participants
@koomin1227 @namewhat99