Add JWT logout with server-side token revocation - #98

Open

diveshpatil9104 wants to merge 6 commits into

OneBusAway:mainfrom

diveshpatil9104:feat/jwt-revocation

Commits on Sep 4, 2026

feat: issue a revocable jti on every JWT
diveshpatil9104
committed
2f0bb89
feat: add revoked_tokens table, queries, and store
diveshpatil9104
committed
cc09888
feat: reject revoked tokens on the header and cookie paths
diveshpatil9104
committed
1f240d4
feat: add POST /api/v1/auth/logout and revoke on admin sign-out
diveshpatil9104
committed
a92adaf
docs: document token revocation and the logout endpoint
diveshpatil9104
committed
83abd0b

Commits on Sep 6, 2026

fix: keep revocation rows when their user is deleted
diveshpatil9104
committed
7052e1c