4 ms·
Can users log out? What happens if a user's token is stolen? Can it be invalidated?
by Graffur 6y ago
Can users log out? What happens if a user's token is stolen? Can it be invalidated?
- deleted 6y ago[deleted]
- amand33p 6y agoYes, they can logout. Sadly, JWT can be stolen, because my app stores them in local storage. It's a portfolio project, so I didn't use safer methods like cookies.
- Graffur 6y agoSo then logging out just logs them out in their own client? edit: fair enough if it's a portfolio project. I didn't see that here or on the site itself.