nesso99 / jwt-blacklist

A module based on node-jsonwebtoken with blacklisting feature.
GNU Lesser General Public License v3.0
9 stars 1 forks source link

Issue with Blacklist token #1

Closed chiragrc71 closed 5 years ago

chiragrc71 commented 6 years ago

Using this package we only blacklist the token which has the expiration date. But we can not Blacklist a token which has no expiration date so, How to Blacklist a token which has no expiration date.

nesso99 commented 6 years ago

Thank you for using my package. In my opinion, if you want to revoke a token without an expiration date, there will be a performance problem. You have some tokens in a blacklist forever and have to check them every time, so I suggest using a token with an expiration date in a common way. In my package, I temporarily give the maximum exp my package allow for the token without exp. Of course, I appreciate your question and will consider the better solution to improve the package.