fix: resetting the password or cancelling a registration ends existing sessions: a token issued before the change is refused

api/pkg/claims/claims.go

@@ -24,3 +24,22 @@ func UserId(r *http.Request) (uint32, bool) {
 
 	return uint32(userIdFloat), true
 }
+
+func TokenVersion(r *http.Request) (uint32, bool) {
+	_, claims, err := jwtauth.FromContext(r.Context())
+	if err != nil {
+		return 0, false
+	}
+
+	rawTokenVersion, ok := claims["token_version"]
+	if !ok {
+		return 0, false
+	}
+
+	tokenVersionFloat, ok := rawTokenVersion.(float64)
+	if !ok {
+		return 0, false
+	}
+
+	return uint32(tokenVersionFloat), true
+}