Skip to content

Deleted app tokens should no longer provide authentication #119

@dkhalife

Description

@dkhalife

When an App Token is deleted from the database, it is currently still possible to use it with the initial scope until its expiration date. This should not be allowed.

Once an app token is deleted in the database, it should no longer be valid for authentication. Make the necessary changes to the authentication, claims initialization and verification and surrounding code to implement this requirement

Metadata

Metadata

Assignees

Labels

bugSomething isn't working

Projects

No projects

Milestone

No milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions