search

ali-bouali / spring-boot-3-jwt-security

Sample project on how to implement JWT security based using Spring boot 3 and Spring security 6
https://aliboucoding.com/p/securing-your-spring-boot-3-0-applications-with-json-web-tokens-jwt
Apache License 2.0
1.86k stars 870 forks source link

Logout #14

Closed sunshinebulb394 closed 1 year ago

sunshinebulb394 commented 1 year ago

Do you need to create a controller for the logout url ?

Lunatix01 commented 1 year ago

Do you need to create a controller for the logout url ?

even tho it might be very late and also the issue is closed but I want to point this out for others :

You cannot manually expire a token after it has been created. you cannot log out with JWT on the server side as you do with sessions. There are some techniques to do that for example blacklisting token saving blacklisted tokens in DB, the most efficient way is using Redis since it's a fast in-memory key-value database.