feat: Invalidate access token on logout

2025-07-19 05:09:43 +02:00 · 2022-09-07 18:39:33 +05:00 · 2022-09-07 18:39:33 +05:00 · 48ea62c0a0
commit 48ea62c0a0
parent f091de6827
26 changed files with 242 additions and 37 deletions
--- a/server/api/controllers/access-tokens/delete.js
+++ b/server/api/controllers/access-tokens/delete.js
@ -0,0 +1,16 @@
+module.exports = {
+  async fn() {
+    const { accessToken } = this.req;
+
+    await Session.updateOne({
+      accessToken,
+      deletedAt: null,
+    }).set({
+      deletedAt: new Date().toUTCString(),
+    });
+
+    return {
+      item: accessToken,
+    };
+  },
+};