JWT Logout View with Refresh Token BlackList. Django Rest Framework Project Tutorial [24]

[@mehboobshaikh8396]

can you make a video on how to integrate keycloak with django rest framework?

[@zaheeruddinbaber6762]

sir the logout didnt work for me.. after logout i can still access other urls with same token access token. how to fix it?

[@takibahmed8859]

Hello sir, thanks for the video. I was wondering how can I delete the stored jwt token from client-side in django?

[@thedjangoway9052]

Thank you sir. Can you please teach us how to use react as template for django?

[@nikhilbhardwaj6055]

In my case blacklist token not storing user credential and also I'm able to produce new access token with blacklisted refresh token

[@kumarbanavathu7716]

in restframeowrk simple jwt settings SIMPLE_JWT = { 'ACCESS_TOKEN_LIFETIME': timedelta(minutes=5), 'REFRESH_TOKEN_LIFETIME': timedelta(days=1), 'ROTATE_REFRESH_TOKENS': True, 'BLACKLIST_AFTER_ROTATION': True, # remaining settings }

[@vikalpjha5070]

How can I Authorize in Postman Like Swagger? I tried using bearer Token option but it isn't working

[@resistancemove]

Big Fan Sir

[@estebandelahoz1942]

Doesn't allow you to delete the user by permissions when I'm in admin

[@mdshabbirrr]

logout didnt work for me.. after logout i can still access other urls with same token

[@carlosriossuarez2561]

the same happens to me

[@mdshabbirrr]

@@carlosriossuarez2561 jwt tokens are stateless, there is no way you can expire it. The only possible way is to keep access token relatively shorter time and refresh token bigger time, and blacklisting the refresh token after logout. Still if you logout with all these you can access the URLs in that shorter access token time..

[@iuliiamukhamadiarova2292]

@@mdshabbirrr yes, thanks, you are right. After logout i can still access other urls with same token, but when I decrease a lot token lifetime, e.g. set "ACCESS_TOKEN_LIFETIME": timedelta(seconds=60) after 1 minute left after logout I have no access to other URLs with this token anymore

[@nikhilsahu2242]

hello, i am getting Deleting the user account 'nikhil' would result in deleting related objects, but your account doesn't have permission to delete the following types of objects: outstanding token superuser why not delete user in admin

[@estebandelahoz1942]

Same problem

[@shashankgehlot5683]

doesn't work when you are using mongodb database. you are gonna get stuck at migrations.

[@mohammedkamel4079]

did you solve the issue. Will appreciate if you told me how

[@iambhushan418]

hey you might have got dabase.error but its working without applying that 1 migration also. It does makes collection for blacklisted token and outstanding tokens, I am using djongo.

[@I_think_its_funny]

Mongo Db is not supported by Simple JWT