Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(#6) : 회원가입, 로그인 및 토큰 처리 #8

Merged
merged 1 commit into from
Aug 18, 2024
Merged

Conversation

aeeazip
Copy link
Contributor

@aeeazip aeeazip commented Aug 18, 2024

No description provided.

@aeeazip aeeazip added the ✨ feature 기능 추가 label Aug 18, 2024
@aeeazip aeeazip self-assigned this Aug 18, 2024
@aeeazip aeeazip linked an issue Aug 18, 2024 that may be closed by this pull request
5 tasks
@aeeazip aeeazip merged commit dee9acb into main Aug 18, 2024
@aeeazip aeeazip requested review from eojinny and yeon015 August 18, 2024 08:52
Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@eojinny @yeon015

로그아웃 시 redis에서

리프레시 토큰을 삭제
액세스 토큰을 블랙리스트 처리
위와 같은 로직으로 진행됩니다.

블랙리스트는 <key: 액세스, value: memberId> 형태로 남은 access 유효 시간만큼만 저장하고, validateToken으로 유효성 검사 시 redis에 token을 key로 갖는 value가 있을 때 Hijacking으로 간주합니다.

블랙리스트 처리도 다양한 방식이 있던데 이 방식이 효율적인지, Set로 저장한 방식은 어떻게 진행되는지 궁금해요.
많관부 ❤️

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
✨ feature 기능 추가
Projects
None yet
Development

Successfully merging this pull request may close these issues.

✨ [FEAT] member 회원가입, 로그인, 토큰 처리
1 participant