hi, im trying to implement a logout function on my own. im new to nestjs. so basically when the request goes to logout, i add the token to a blacklist in the db and i have to verify if the token already exists in the blacklist on subsequent request using a guard. but my question is: when should i remove that token blacklisted from the db?
#logout in nestjs
opaque nebula
wise sparrow
When the token is expired
opaque nebula
When the token is expired
so i should use a cron?
wise sparrow
That's an option
opaque nebula
That's an option
what would be another option?
wise sparrow
On checking if it's in the blacklist you could check the expiration time too (if the token is there) and if it's expired delete the token from the blacklist
Little more intensive on the request side
Also, generally, should only be going to check the blacklist if the token is valid, so that wouldn't necessarily be an issue anyways. Though you could, on an expired token, just fire a DELETE query that may or may not delete a token anyways, while returning the 403 response.
Just a few other options 🙂