athiwatp athiwatp

First of all, please note that token expiration and revoking are two different things.

Expiration only happens for web apps, not for native mobile apps, because native apps never expire.
Revoking only happens when (1) uses click the logout button on the website or native Apps;(2) users reset their passwords; (3) users revoke their tokens explicitly in the administration panel.

A JWT token that never expires is dangerous if the token is stolen then someone can always access the user's data.

Quoted from JWT RFC:

Setting up a Kubernetes Cluster on DigitalOcean

	package example_test

	import (
	"crypto/aes"
	"crypto/cipher"
	"hex"
	"io"
	)

	// AES-GCM should be used because the operation is an authenticated encryption

	--log_gc (Log heap samples on garbage collection for the hp2ps tool.)
	type: bool default: false
	--expose_gc (expose gc extension)
	type: bool default: false
	--max_new_space_size (max size of the new generation (in kBytes))
	type: int default: 0
	--max_old_space_size (max size of the old generation (in Mbytes))
	type: int default: 0
	--max_executable_size (max size of executable memory (in Mbytes))
	type: int default: 0

	package main

	import (
	"crypto/rand"
	"encoding/base64"
	"fmt"
	"io"
	)

	// Adapted from https://elithrar.github.io/article/generating-secure-random-numbers-crypto-rand/

	//assumes you have the following environment variables setup for AWS session creation
	// AWS_SDK_LOAD_CONFIG=1
	// AWS_ACCESS_KEY_ID=XXXXXXXXXX
	// AWS_SECRET_ACCESS_KEY=XXXXXXXX
	// AWS_REGION=us-west-2( or AWS_DEFAULT_REGION=us-east-1 if you are having trouble)

	package main

	import (
	"fmt"

	package main

	import (
	"fmt"
	"time"
	)

	// Suggestions from golang-nuts
	// http://play.golang.org/p/Ctg3_AQisl