Revoked tokens about jwt HOT 8 CLOSED

There's no bandwidth to address this issue. Closing because this should be easy to implement this feature without changing anything inside the @nestjs/jwt package.

from jwt.

+1, I'm also interested in this feature. It would be nice to be able to maintain (outside of Nest) a list of revoked tokens and to have an easy-to-use hook to check them / reject presented tokens if they're part of the blacklist.

from jwt.

That should be very easy to implement without changing anything inside the @nestjs/jwt package.

from jwt.

I'll take a stab at it and report back here to share my approach for those interested :)

from jwt.

Can't we use the JwtStrategy validate method? Maybe passing the jwt as second parameter, this way we can keep the validate logic in one place.

from jwt.

Nevermind, i miss the jwt id part.

from jwt.

any update?

from jwt.

+1

from jwt.