Skip to content

Commit c7dae9e

Browse files
committed
* Bug : Invalidation of tokens was not happening due to not using the actual key for the storage
1 parent f4c7b81 commit c7dae9e

File tree

2 files changed

+8
-1
lines changed

2 files changed

+8
-1
lines changed

changelog.md

Lines changed: 4 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,9 @@
11
# CHANGELOG
22

3+
## 2.2.0
4+
5+
* `Bug` : Invalidation of tokens was not happening due to not using the actual key for the storage
6+
37
## 2.1.0
48

59
* `Feature` : cbauth upgraded to version 4

models/jwt/JwtService.cfc

Lines changed: 4 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -209,7 +209,10 @@ component accessors="true" singleton{
209209
variables.log.info( "Token invalidation request issued for :#arguments.token#" );
210210
}
211211

212-
var results = getTokenStorage().clear( arguments.token );
212+
// Invalidate the token, decode it first and use the jti claim
213+
var results = getTokenStorage().clear(
214+
this.decode( arguments.token ).jti
215+
);
213216

214217
// Announce the creation
215218
variables.interceptorService.processState( "cbSecurity_onJWTInvalidation", {

0 commit comments

Comments
 (0)