fix(cognito): keep revoked tokens across restarts #5

Merged
Zakaria merged 1 commits from fix/cognito-revoked-tokens-reload into main 2026-10-24 18:53:00 +00:00
Owner

RevokedTokenInfo serialized its derived isExpired() as "expired", which the
persistent store's ObjectMapper then refused to read back. On restart the file
was moved aside as .corrupt and every revocation was forgotten, so refresh
tokens revoked by sign-out worked again. The derived field is no longer
written, and files that carry it are read with it ignored.

RevokedTokenInfo serialized its derived isExpired() as "expired", which the persistent store's ObjectMapper then refused to read back. On restart the file was moved aside as .corrupt and every revocation was forgotten, so refresh tokens revoked by sign-out worked again. The derived field is no longer written, and files that carry it are read with it ignored.
Zakaria added 1 commit 2026-10-24 18:52:56 +00:00
RevokedTokenInfo serialized its derived isExpired() as "expired", which the
persistent store's ObjectMapper then refused to read back. On restart the file
was moved aside as .corrupt and every revocation was forgotten, so refresh
tokens revoked by sign-out worked again. The derived field is no longer
written, and files that carry it are read with it ignored.
Zakaria merged commit 90d5dc9427 into main 2026-10-24 18:53:00 +00:00
Sign in to join this conversation.
No Reviewers
No Label
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: Zakaria/FlociClone#5