sjokkateer / flask_distributed_auth_service Goto Github PK

Add options to store refresh tokens and to either blacklist or revoke them.

Modify the system to make use of api composition as can be found: api composition pattern.
This should at least keep all the communication and functionality central in one API rather than multiple APIs copying similar behavior (think of token verification and refreshing etc.)

Add functionality to delete a user and figure out + implement the deletion of user related resources as an atomic transaction accross services.

Create a command to create a public and private key pair that will be used solely to sign refresh tokens by the auth server.
Otherwise other services will just take the refresh token and obtain the public key from the key API endpoint treating it identically but with a longer expiration date time (which defeats the purpose of the structure).

Add register functionality to the auth server

• Process of making a request with expired access token -> refresh token -> access token