devstack/authorizer
4
0
Fork 0
Code Pull Requests Actions Activity

fix: rotate refresh token

Browse Source
This commit is contained in:
Lakhan Samani 2022-03-08 19:18:33 +05:30
parent fd9eb7c733
commit 7136ee924d
1 changed files with 2 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
server/handlers/token.go
View File

@ -143,6 +143,8 @@ func TokenHandler() gin.HandlerFunc {
userID = claims["sub"].(string) userID = claims["sub"].(string)
roles = claims["roles"].([]string) roles = claims["roles"].([]string)
scope = claims["scope"].([]string) scope = claims["scope"].([]string)
// remove older refresh token and rotate it for security
sessionstore.RemoveState(refreshToken)
} }
user, err := db.Provider.GetUserByID(userID) user, err := db.Provider.GetUserByID(userID)