szerhusenBC / jwt-spring-security-demo

A demo for using JWT (Json Web Token) with Spring Security and Spring Boot 2

Geek Repo:Geek Repo

Github PK Tool:Github PK Tool

Token validation on change password and logout

ntota opened this issue · comments

commented

First off all I am very thankful for this demo project. It was well explained.
I need below clarifications,
How to handle token validity when user changed his password? invalidate the current token and redirect him to login page, asking him to login with new password ?
and in case of User logs out?

Token is not linked to the password value, it's up to you to generate a new one.

@davideas mentioned it, thx ;)