this post was submitted on 22 Mar 2025
67 points (92.4% liked)
AssholeDesign
8401 readers
2 users here now
This is a community for designs specifically crafted to make the experience worse for the user. This can be due to greed, apathy, laziness or just downright scumbaggery.
founded 2 years ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
General practice for JWTs is to keep a list of "revoked but not yet expired" tokens, and check against that. That list will generally be tiny, since each item only stays on the list for as long as the normal lifetime of a token is, so it's not really burdensome to maintain and replicate.