AccessToken invalidation

[bajtos]

This is an Epic to capture all stories for implementing AccessToken invalidation on email/password change.

[josephlaw]

Hi, got "Invalid Access Token" after upgrade from 2.37.1 to 2.38.0, no idea what happen.

error{"data":{"error":{"message":"Invalid Access Token","stack":"Error: Invalid Access Token\n at /Users/xxxx/tmp/server/node_modules/loopback/common/models/access-token.js:117:23\n at /Users/xxxx/tmp/server/node_modules/loopback/common/models/access-token.js:170:11\n at Object.forward (/usr/local/lib/node_modules/strongloop/node_modules/strong-agent/lib/proxy.js:92:23)\n at eval (eval at wrap (/usr/local/lib/node_modules/strongloop/node_modules/strong-agent/lib/proxy.js:214:20), <anonymous>:3:21)\n at /Users/xxxx/tmp/server/node_modules/loopback-datasource-juggler/lib/dao.js:2760:17\n at doNotify (/Users/xxxx/tmp/server/node_modules/loopback-datasource-juggler/lib/observer.js:99:49)\n at doNotify (/Users/xxxx/tmp/server/node_modules/loopback-datasource-juggler/lib/observer.js:99:49)\n at doNotify (/Users/xxxx/tmp/server/node_modules/loopback-datasource-juggler/lib/observer.js:99:49)\n at doNotify (/Users/xxxx/tmp/server/node_modules/loopback-datasource-juggler/lib/observer.js:99:49)\n at Function.ObserverMixin._notifyBaseObservers (/Users/xxxx/tmp/server/node_modules/loopback-datasource-juggler/lib/observer.js:122:5)

[josephlaw]

Add "logoutSessionsOnSensitiveChanges" : true into server/config.json to fix "Invalid Access Token" after upgrade from 2.37.1 to 2.38.0. Thanks your attention.

[bajtos]

@josephlaw hi, thank you for the feedback. Could you please open a new issue and include full steps for reproducing the issue, ideally per our bug-reporting instructions? Also if you could mention my GitHub handle (@bajtos) in the issue description, so that I get email notification.

[stale]

This issue has been closed due to continued inactivity. Thank you for your understanding. If you believe this to be in error, please contact one of the code owners, listed in the CODEOWNERS file at the top-level of this repository.