delete用户后token是否能够设置失效？

来源：8-2 g变量中读取uid防止超权

一个在努力跑的web小白

2020-12-03

def verify_auth_token(token):
    s = Serializer(current_app.config['SECRET_KEY'])
    try:
        data = s.loads(token)
    except BadSignature:
        raise AuthFailed(msg='token is invalid', error_code=1002)
    except SignatureExpired:
        raise AuthFailed(msg='token is expired', error_code=1003)
    uid = data['uid']
    ac_type = data['type']
    return User(uid, ac_type, '')

rtrt～
退出登录操作应该也是需要“注销”掉token？

写回答

1回答