Invalidate JWT if member removed from team?

[davco01a]

Invalidate JWT if member removed from team?

[davco01a]

David Cohen 4:02 PM
do you think your code dynamically invalidates the JWT if someone gets removed from a GIT team
Bruce Tiffany 4:14 PM
no, they’ll have access until the jwt expires.
David Cohen 4:14 PM
ah OK, thanks
Bruce Tiffany 4:14 PM
yw
David Cohen 4:18 PM
Probably going to open an issue about this, but not urgent
since everything is in a state of flux right now
not sure how the CLI is going to fit in, there are a lot of changes coming in collections moving forward (edited) 
Seems like checking the git team and member access every call might be a performance drag

[davco01a]

talk to @brutif

[davco01a]

Difficult to implement, will circle back to Security team