Feature Request: Method for Manually Destroying Tokens
alckordev opened this issue · 3 comments
alckordev commented
Issue Description
Currently, there is no method in LexikJWTAuthenticationBundle to manually destroy a token. This can be problematic, as users may log out on the frontend by removing the token from local storage or cookies, but the token can still be valid until it expires. I suggest implementing a method that allows for the manual invalidation or destruction of an active token.
Suggestion Details
- Method Name:
destroyToken()o similar. - Functionality: This method should invalidate the current token, ensuring that it is not valid for future requests.
Benefits
- Allows application developers to proactively manage the expiration of tokens.
- Improves security by enabling manual invalidation of tokens in specific situations.
Example Usage (Hypothetical)
// Hypothetical example of how the new method could be used
$token = $JWTManager->create($user);
$JWTManager->destroyToken($token);