2 ms·
>> Fine, revoke the master token on the authentication server and after 5 minutes at the latest That might be fine for a lot of use cases. But anything that ca
by martin-adams 8y ago
>> Fine, revoke the master token on the authentication server and after 5 minutes at the latest
That might be fine for a lot of use cases. But anything that can steal money using that token and 5 minutes is a very long time indeed.
- mschuster91 8y agoBut anything that can steal money using that token and 5 minutes is a very long time indeed. Then implement a check for the token in destructive operations. Should keep the performance impact pretty low.