Revoke JWT JTIs when modifying a subuser's permissions

This commit is contained in:
Dane Everitt 2020-11-03 21:01:15 -08:00
parent c4df534722
commit 009f9c297d
No known key found for this signature in database
GPG key ID: EEA66103B3D71F53
3 changed files with 69 additions and 13 deletions

View file

@ -59,7 +59,7 @@ class WebsocketController extends ClientApiController
}
$token = $this->jwtService
->setExpiresAt(CarbonImmutable::now()->addMinutes(15))
->setExpiresAt(CarbonImmutable::now()->addMinutes(10))
->setClaims([
'user_id' => $request->user()->id,
'server_uuid' => $server->uuid,