JSON Web Token expiration

前端 未结 4 1239
春和景丽
春和景丽 2021-02-05 10:54

On most of the JWT (JSON Web Token) tutorial (e.g: this and this) are saying, once validated you can use the incoming token to get client information without validating it from

4条回答
  •  离开以前
    2021-02-05 11:26

    RFC 7009 specifies OAuth 2.0 Token Revocation. Basically you have an endpoint where you can revoke the access_tokens.

提交回复
热议问题