If user deleted in wordpress, need to invalid/expire token/ user not exist response

[vinaye42]

we got a report of a critical security issue in your plugin. If the user is deleted in wordpress, but the session in the app is still active,

You have to check in validate token if user exist or not like below image

/** check user exist or not */
if( isset($token->data->user->id) ) {
    $user = get_userdata($token->data->user->id);

    if ( ! $user ) {
        return new WP_Error(
            'jwt_auth_bad_request',
            'User not found',
            [
                'status' => 403,
            ]
        );
    }
}

[vinaye42]

hi @Tmeister, Plz check the above issue