Blacklists
blacklists
Tokens
blacklists.tokens
Methods
Add the token identified by the jti to a blacklist for the tenant.
Retrieve the jti and aud of all tokens that are blacklisted.
Note: The JWT specification states that the jti field can be used to prevent replay attacks. Though Auth0 tokens do not include a jti, you can nevertheless blacklist a jti to prevent a token being used more than a predetermined number of times. This behavior is similar to implementing a nonce (where the token's signature can be thought of as the nonce). If a token gets stolen, it (or the tokens issued after it) should be blacklisted and let expire.
Example: Authorization: Bearer My Bearer Token
Optional filter on the JWT's aud claim (the client_id to which the JWT was issued).
Domain types