Add JWT logout with server-side token revocation - #98

Open

diveshpatil9104 wants to merge 6 commits into

OneBusAway:mainfrom

diveshpatil9104:feat/jwt-revocation

Commits on Sep 7, 2026

feat: issue a revocable jti on every JWT
diveshpatil9104
committed
a433710
feat: add revoked_tokens table, queries, and store
diveshpatil9104
committed
047f9d0
feat: reject revoked tokens on the header and cookie paths
diveshpatil9104
committed
e569aa0
feat: add POST /api/v1/auth/logout and revoke on admin sign-out
diveshpatil9104
committed
4e4ea77
docs: document token revocation and the logout endpoint
diveshpatil9104
committed
5f0cf44
fix: keep revocation rows when their user is deleted
diveshpatil9104
committed
3087004