Django React/Redux Base Project

Re:Django React/Redux Base Project by lfrodrigues on Thursday October 27, 2016 @03:29PM (#12808865)

Token based auth doesn't need to be stateless. In fact in our current implementation it is not.

If you use stateless like JWT (we had this before) you end up having a huge problem: imagine a user wants to logout all the open accounts in different browsers.

How would you handle that? You would need to wait for the expiration of the token, a solution that is not that secure.

[ Parent | on HN ]

Re:Django React/Redux Base Project by smashed on Thursday October 27, 2016 @06:40PM (#12810992)

One solution is to store the token in localStorage, which supports events.

You can listen for localStorage changes in all your tabs. When it changes, force a page reload or similar.

Edit: typos

[ Parent | on HN ]

Re:Django React/Redux Base Project by lfrodrigues on Friday October 28, 2016 @02:00AM (#12813475)

I think you didn't understand the issue. Imagine you want to implement a "logout from all my sessions" like Facebook or Google have (sessions in different devices)

[ Parent | on HN ]