jazzband / djangorestframework-simplejwt

A JSON Web Token authentication plugin for the Django REST Framework.
https://django-rest-framework-simplejwt.readthedocs.io/
MIT License
4.01k stars 662 forks source link

Not working with django 5.1.1 also logout and password reset issues not still resolved in library #826

Open mohitpandeyji opened 2 months ago

mohitpandeyji commented 2 months ago

latest version not working on django 5.2

Logout Does Not invalidated already generated access tokens which is a big security concern

Password Reset Does Not Invalidate access tokens which are active in multiple systems

no support for invalidating single or all refresh / access token at once

israelzuniga commented 1 month ago

Latest official release of Django is 5.1.1 and version 5.2 LTS is expected to be around mid 2025. Maybe is this too soon to report? I just made a clean deployment with the next versions and can confirm that the first two statements work without issues:

django-5.1.1 
django-cors-headers-4.4.0
djangorestframework-3.15.2 
djangorestframework-simplejwt-5.3.1
PyJWT-2.8.0

Also, my implementations are based on the documentation