Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Expired JWT token still allows for notes to be generated #12

Closed
neilscallywag opened this issue Mar 21, 2024 · 1 comment · Fixed by #19
Closed

Expired JWT token still allows for notes to be generated #12

neilscallywag opened this issue Mar 21, 2024 · 1 comment · Fixed by #19
Assignees

Comments

@neilscallywag
Copy link
Collaborator

Steps to reproduce the behavior:

  1. Login using google oauth2
  2. Upload pdf and click generate
  3. monitor console log
  4. Let token Expire
  5. Make down-clean prune-all up after token expired.
  6. Do not close the chrome tab
  7. Press generate again
  8. Monitor console log and rabbitMQ

image
image

When you try to log out with expired JWT token you get 500 ISE. Unsure of the cause.

@ztdevelops
Copy link
Collaborator

Logic seems to assume that the user logging out does not have an expired token. This likely causes redis to throw an exception because the program is trying to set a negative TTL for the revoked token. Haven't tried it out but likely reason for 500 ISE.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
3 participants