A flask python application creates a login endpoint that authenticates a user with an LDAP server, adds a consumer for the user to a Kong API gateway giving the caller a JWT token.
The API has no logout endpoint. This should be authenticated and allow a user to clear their JWT Token. Currently the end user app just forgets the token but it would be more secure if a logout service is provided.
The API has no logout endpoint. This should be authenticated and allow a user to clear their JWT Token. Currently the end user app just forgets the token but it would be more secure if a logout service is provided.