this post was submitted on 22 Mar 2025
72 points (100.0% liked)

AssholeDesign

8401 readers
2 users here now

This is a community for designs specifically crafted to make the experience worse for the user. This can be due to greed, apathy, laziness or just downright scumbaggery.

founded 2 years ago
MODERATORS
 
you are viewing a single comment's thread
view the rest of the comments
[–] [email protected] 1 points 4 days ago

General practice for JWTs is to keep a list of "revoked but not yet expired" tokens, and check against that. That list will generally be tiny, since each item only stays on the list for as long as the normal lifetime of a token is, so it's not really burdensome to maintain and replicate.