BUG#AC-9337:Revoking or invalidating previous access tokens upon generating new access token

Rachana · Rachana · commit 4cbacf943141 · 2024-05-16T06:21:11.000-07:00
diff --git a/app/code/Magento/JwtUserToken/Model/RevokedValidator.php b/app/code/Magento/JwtUserToken/Model/RevokedValidator.php
@@ -40,6 +40,7 @@ public function validate(UserToken $token): void
             (int) $token->getUserContext()->getUserType(),
             (int) $token->getUserContext()->getUserId()
         );
+
         if ($revoked && $token->getData()->getIssued()->getTimestamp() <= $revoked->getBeforeTimestamp()) {
             throw new AuthorizationException(__('User token has been revoked'));
         }

Original file line number	Diff line number	Diff line change
`@@ -40,6 +40,7 @@ public function validate(UserToken $token): void`
`40`	`40`	`(int) $token->getUserContext()->getUserType(),`
`41`	`41`	`(int) $token->getUserContext()->getUserId()`
`42`	`42`	`);`
	`43`	`+`
`43`	`44`	`if ($revoked && $token->getData()->getIssued()->getTimestamp() <= $revoked->getBeforeTimestamp()) {`
`44`	`45`	`throw new AuthorizationException(__('User token has been revoked'));`
`45`	`46`	`}`