[Solved] How can you securely invalidate a refresh token after logout in a NestJS app using a database? — Ans: Delete or mark the refresh token as revoked in the database | NestJS

NestJS - Authentication

How can you securely invalidate a refresh token after logout in a NestJS app using a database?

ADelete or mark the refresh token as revoked in the database

BClear the access token from client localStorage

CChange the user's password

DDo nothing; tokens expire automatically

Step-by-Step Solution

Solution:

Step 1: Understand token invalidation on logout
Removing or marking the refresh token revoked in DB prevents reuse after logout.
Step 2: Evaluate other options
Clearing access token client-side does not affect refresh token; changing password is unrelated; relying on expiry alone is insecure.
Final Answer:
Delete or mark the refresh token as revoked in the database -> Option A
Quick Check:
Logout token invalidation = revoke in DB [OK]

Quick Trick: Revoke refresh tokens in DB on logout [OK]

Common Mistakes:

Master "Authentication" in NestJS

9 interactive learning modes - each teaches the same concept differently

More NestJS Quizzes

How can you securely invalidate a refresh token after logout in a NestJS app using a database?