feat: token tracking and authentication updates #101

Merged

mcataford merged 2 commits from feat/active-token-tracking into main

2024-01-03 01:26:54 +00:00

mcataford commented

2024-01-03 01:02:29 +00:00

(Migrated from github.com)

Description

This updates the way JWTs are handled by moving the auth to an authentication class as per Django Rest Framework's pattern. A token-tracking table is also introduced to allow future server-side revocation of tokens.

QA

✔️ Verified that manually revoking a token denies access even if the token is not expired;
✔️ Verified that logging in allows access to the endpoints with the authentication/permission class changes;
✔️ Verified that logging in adds an AuthenticationToken record tracking that token.

# Description This updates the way JWTs are handled by moving the auth to an authentication class as per Django Rest Framework's pattern. A token-tracking table is also introduced to allow future server-side revocation of tokens. # QA - :heavy_check_mark: Verified that manually revoking a token denies access even if the token is not expired; - :heavy_check_mark: Verified that logging in allows access to the endpoints with the authentication/permission class changes; - :heavy_check_mark: Verified that logging in adds an AuthenticationToken record tracking that token.

This repo is archived. You cannot comment on pull requests.

No reviewers