Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixed issue #363 #488

Open
wants to merge 2 commits into
base: master
Choose a base branch
from
Open

Fixed issue #363 #488

wants to merge 2 commits into from

Conversation

MadsKelberg
Copy link

@MadsKelberg MadsKelberg commented Nov 14, 2021

Upon refreshing the token, a new Outstanding token is created in the serializers.py where the user from the blacklisted token is added to the new refresh token. This ensures that there is always an Outstanding token for each refresh token in use. Therefore, this will solve the issue of logging out from all devices by blacklisting all the Outstanding tokens linked to that specific user.

Upon refreshing the token a new Outstanding token is created in the serializers.py where the user from the blacklisted token is added to the new refresh token. This insures that there is always an Outstanding token for each refresh token in use. Therefore, this will solve the issue of logging out from all devices by blacklisting all the Outstanding tokens linked to that specific user.
@Andrew-Chen-Wang
Copy link
Member

Please update with master branch and fix CI.

Copy link

@OliverGeneser OliverGeneser left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Works thanks!

@MadsKelberg
Copy link
Author

@Andrew-Chen-Wang I have synced with the main branch

@Andrew-Chen-Wang
Copy link
Member

Please fix test cases. I don't have the time this winter break to review what this actually entails. Please ping me when test cases pass. Cheers!

dogrocker added a commit to dogrocker/djangorestframework-simplejwt that referenced this pull request Apr 27, 2022
This commit is rewrite from jazzband#488
ref: Upon refreshing the token a new Outstanding token is created in the serializers.py where the user from the blacklisted token is added to the new refresh token. This insures that there is always an Outstanding token for each refresh token in use. Therefore, this will solve the issue of logging out from all devices by blacklisting all the Outstanding tokens linked to that specific user.
@mittal-sahab-sudo
Copy link

Is it still a pending issue ?

@SumitJainUTD
Copy link

this is still reproducible, I believe this is not fixed

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

OustandingToken only created when refresh token is used to get a new key pair and not at creation ? Bug ?
5 participants