ai-cfia / membrane-backend

Membrane Backend: A centralized authentication service for Single Sign-On (SSO) enabling seamless token-based email verification across multiple client applications.
MIT License
1 stars 0 forks source link

Implement JWT Token Blacklist Functionality #14

Closed CFIALeronB closed 1 year ago

CFIALeronB commented 1 year ago

Description: To enhance our security measures and ensure that JWT tokens cannot be reused or shared among users, we need a mechanism to blacklist tokens after their initial use.

Acceptance Criteria:

  1. Once a JWT token is verified successfully, it should be added to a blacklist.
  2. If a token that exists in the blacklist is presented again for verification, the request should be denied.
  3. Ensure that relevant unit tests are updated to reflect this behavior.