Old tokens not being deleted

[kaustubh-nair]

• Version: 0.1.43

I currently have config.max_number_of_devices = 6 and config.token_lifespan = 10.weeks but everytime I login it is creating a new token and not deleting the older ones. As a result I have 63 tokens right now which I verified by running User.first.tokens.count
Is there a way to delete old tokens?

[dks17]

@KauNair, hello.
Let's take a look here:

devise_token_auth/app/models/devise_token_auth/concerns/user.rb

Lines 249 to 256 in 72976d8

	def remove_tokens_after_password_reset
	return unless should_remove_tokens_after_password_reset?
	if tokens.present? && tokens.many?
	client_id, token_data = tokens.max_by { |cid, v| v[:expiry] || v['expiry'] }
	self.tokens = { client_id => token_data }
	end
	end

1. Set remove_tokens_after_password_reset = true in the gem initialize file.
2. Call User.first.remove_tokens_after_password_reset where you want.
3. Or implement if block from remove_tokens_after_password_reset where you need.

Or the second way:

user = User.first
user.tokens = {}
user.save

I didn't check these ways, but you should try them.

[bananatron]

It looks like this should be handling it:

devise_token_auth/app/models/devise_token_auth/concerns/user.rb

Line 37 in 72976d8

before_save :destroy_expired_tokens

devise_token_auth/app/models/devise_token_auth/concerns/user.rb

Lines 230 to 237 in 72976d8

	def destroy_expired_tokens
	if tokens
	tokens.delete_if do |cid, v|
	expiry = v[:expiry] || v['expiry']
	DateTime.strptime(expiry.to_s, '%s') < Time.zone.now
	end
	end
	end

Might be worth looking at the actual expiry and your server time and seeing if it actually meets these conditions?