Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

oauth2: Revoke previous and future access tokens when revoking a token #884

Closed
aeneasr opened this issue May 25, 2018 · 0 comments
Closed
Assignees
Labels
feat New feature or request. package/oauth2
Milestone

Comments

@aeneasr
Copy link
Member

aeneasr commented May 25, 2018

See ory/fosite#278

@aeneasr aeneasr added this to the 1.0.0 milestone May 25, 2018
@aeneasr aeneasr self-assigned this May 25, 2018
@aeneasr aeneasr added feat New feature or request. package/oauth2 labels May 25, 2018
aeneasr pushed a commit that referenced this issue May 29, 2018
This patch properly tracks access and refresh tokens across requests and thus resolves several issues related to broken token revokation:

* oauth2: Revoke previous and future access tokens when revoking a token - closes #884
* oauth2: Revoke access and refresh tokens when authorization code is used twice - closes #693
* oauth2: Revoke tokens when performing refreshing grant - closes #889
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feat New feature or request. package/oauth2
Projects
None yet
Development

No branches or pull requests

1 participant