Open
Description
👟 Reproduction steps
I use JWT to authenticate a user on my API server. I use the /account endpoint to verify the JWT. If the user is logged out because the session has expired, the JWT is still valid and I still get a successful response when I call /account with the user's JWT.
👍 Expected behavior
The JWT should be invalid after the user is logged out and calling /account with users JWT should throw an error.
👎 Actual Behavior
Calling /account with the users JWT gives a successful response.
Discord thread: https://discord.com/channels/564160730845151244/1221805690050445362
🎲 Appwrite version
Version 1.4.x
💻 Operating system
Linux
🧱 Your Environment
I use Self-Hosted Appwrite Version 1.4.13
👀 Have you spent some time to check if this issue has been raised before?
- I checked and didn't find similar issue
🏢 Have you read the Code of Conduct?
- I have read the Code of Conduct
Metadata
Metadata
Assignees
Labels
Type
Projects
Status
In Progress