Github user KlausTrainer commented on the pull request:
https://github.com/apache/couchdb/pull/366#issuecomment-155251011
@kxepal You're welcome :)
Regarding token revocation with delegated authentication: You probably
don't want to care about revoking tokens for individual users. The whole point
of delegated authentication is to not care about such issues, I guess ;) You
either trust the identity provider completely, or you don't trust it at all.
That is, you do want to be able to revoke all tokens that have been issued by
the identity provider, without revoking all other tokens (cookies) at the same
time.
Btw., regarding delegated authentication, I'd like CouchDB to support JSON
Web Tokens (JWT). I created a working prototype for JWT support a while ago,
see https://github.com/KlausTrainer/couchdb-couch/tree/jwt. The larger parts
that are still missing are tests and documentation. I definitely want to get
back to that, but feel like working on 2.0 blockers is a bit more important
right now ;)
---
If your project is set up for it, you can reply to this email and have your
reply appear on GitHub as well. If your project does not have this feature
enabled and wishes so, or if the feature is enabled but not working, please
contact infrastructure at [email protected] or file a JIRA ticket
with INFRA.
---
