force expire jwt token in adonis js

Question

Is there a way to force expire jwt token (not refresh token) in adonis-js. I am creating a token on login and setting its time to expire for 10 mins. When I log out I want to force expire that token before 10 mins.

Answer 1

Try these things for your token. The tokens can be expired. But you cannot do it on demand.

1. Set a reasonable expiration time on tokens.
2. Delete the stored token from the client-side upon log out.
3. Have DB of no longer active tokens that still have some time to live.
4. Query provided token against The Blacklist on every authorized request.

Answer 2

I did it this way:

async login({ request, auth }) {
  const { email, password } = request.all();
  const user = await auth.validate(email, password, true);
  const { name, admin, confirmed } = user;

  const token = await auth.generate(user, false, { expiresIn: '10m' })

  return { token, user }
}