BUG#AC-9337:Revoking or invalidating previous access tokens upon generating new access token

Rachana · Rachana · commit 79764d619389 · 2024-05-16T03:24:45.000-07:00
diff --git a/app/code/Magento/JwtUserToken/Model/RevokedValidator.php b/app/code/Magento/JwtUserToken/Model/RevokedValidator.php
@@ -43,8 +43,5 @@ public function validate(UserToken $token): void
         if ($revoked && $token->getData()->getIssued()->getTimestamp() <= $revoked->getBeforeTimestamp()) {
             throw new AuthorizationException(__('User token has been revoked'));
         }
-        elseif($revoked && $token->getData()->getIssued()->getTimestamp() >= $revoked->getBeforeTimestamp()) {
-            throw new AuthorizationException(__('User token has been revoked'));
-        }
     }
 }

Original file line number	Diff line number	Diff line change
`@@ -43,8 +43,5 @@ public function validate(UserToken $token): void`
`43`	`43`	`if ($revoked && $token->getData()->getIssued()->getTimestamp() <= $revoked->getBeforeTimestamp()) {`
`44`	`44`	`throw new AuthorizationException(__('User token has been revoked'));`
`45`	`45`	`}`
`46`		`- elseif($revoked && $token->getData()->getIssued()->getTimestamp() >= $revoked->getBeforeTimestamp()) {`
`47`		`- throw new AuthorizationException(__('User token has been revoked'));`
`48`		`- }`
`49`	`46`	`}`
`50`	`47`	`}`