# @theorchard/songwhip-utils-express

## 1.5.0

### Minor Changes

- Exports the "invalidateToken" function to invalidate JWTs, which can be used in our AWS hosted express services to revoke tokens on logout or other security events.

## 1.4.0

### Minor Changes

- Moved token invalidation logic from songwhip-utils-auth to this package. This to keep the token invalidation logic compatible with edge runtimes, while still allowing it to be used in our AWS hosted express services.

- Updated dependencies
  - @theorchard/songwhip-utils-auth@2.0.0

## 1.3.1

### Patch Changes

- Adds protection against transient redis errors in the token invalidation checks.

## 1.3.0

### Minor Changes

- Adds a new "rejectInvalidatedTokens" option to privateRouteHandler. When enabled, the handler will check if the incoming JWT has been previously invalidated (e.g. due to logout or token revocation) and reject the request with a 401 if so.

## 1.2.1

### Patch Changes

- Fix invalid import of the picocolor library

## 1.2.0

### Minor Changes

- First production ready release of the package, with stable APIs for error handling and reporting in Express applications.

- Updated dependencies
  - @theorchard/songwhip-utils-auth@1.2.0
  - @theorchard/songwhip-utils@1.2.0

## 1.0.21

### Patch Changes

- Fixes an issue with the private route handler typings.
- Updated dependencies
  - @theorchard/songwhip-utils@1.0.17

## 1.0.20

### Patch Changes

- Initial publish
- Updated dependencies
  - @theorchard/songwhip-utils@1.0.15
  - @theorchard/songwhip-utils-auth@1.0.17
