System Information
- Strapi Version: 4.19:
- Operating System: Windows 10:
- Database:
- Node Version: 18.17.1:
- NPM Version:
- Yarn Version:
Issue Description: When I log in to Strapi admin page, a Bearer token is generated that allows performing actions on the API, such as querying uploaded files:
{{url}}/upload/files?sort=name:ASC&page=1&pageSize=10&folder=133&filters[$and][0][folderPath][$eq]=/133
The problem is that this Bearer token remains valid even after logging out. This means that if someone obtains the token and uses it after I have logged out, they can still access private Strapi functions. This poses a serious security risk, as the token could be shared and used by others to perform unauthorized actions.
Required Solution: I need a way to ensure that the Bearer token expires automatically after logging out. How can I configure this in Strapi?