danielblagy/budget-app

implement v1/access/logout

Closed this issue · 3 comments

danielblagy commented
  • invalidate token by storing it in cache until it expires (blacklist approach)
danielblagy commented

Blocked by #21

  • 👍1
danielblagy commented
  • cover access service with unit tests
  • do #23 in this branch
  • add documentation
danielblagy commented

FOR QA:

  1. implement POST v1/access/logout - logs out the user
  2. fix authorization bug: the error was not propagated properly from handler.authorize convenience function
  3. implemented #23, now if token has expired, status 401 unauthorized is returned with a message token has expired: not authorized