fix(rest): Add token invalidation during logout process.

[nikkuma7]

…calls using a blacklisted token are properly rejected.

Please provide a summary of your changes here.

• Which issue is this pull request belonging to and how is it solving it? (Refer to issue here)
• Did you add or update any new dependencies that are required for your change?

Issue: #3292

Suggest Reviewer

You can suggest reviewers here with an @mention.

How To Test?

1: Get a valid token through login.
2: Send POST request to logout endpoint.
post: http://localhost:8080/resource/api/users/logout

3: Verify response status is 200 OK.
4: Try to use the same token again, should receive 401 Unauthorized.
for ex: get: http://localhost:8080/resource/api/users/profile

How should these changes be tested by the reviewer?
Have you implemented any additional tests?

Checklist

Must:

• All related issues are referenced in commit messages and in PR

[Akilan247]

Hi @heliocastro @GMishx @KoukiHama @arunakhasan @ag4ums,

I noticed that this issue already has an open PR in progress. I’m interested in contributing to SW360 and have experience working with Java, Spring Boot, REST APIs, and authentication mechanisms such as JWT.

I’ve gone through the contribution guidelines and am ready to follow the required workflow (forking, creating a branch, and submitting a PR). Could you please let me know if there are any similar open issues or enhancements — particularly related to authentication, security improvements, or REST API features — that I could work on from scratch?

Thank you for your time, and I look forward to contributing!

[GMishx]

Hi @heliocastro @GMishx @KoukiHama @arunakhasan @ag4ums,

I noticed that this issue already has an open PR in progress. I’m interested in contributing to SW360 and have experience working with Java, Spring Boot, REST APIs, and authentication mechanisms such as JWT.

I’ve gone through the contribution guidelines and am ready to follow the required workflow (forking, creating a branch, and submitting a PR). Could you please let me know if there are any similar open issues or enhancements — particularly related to authentication, security improvements, or REST API features — that I could work on from scratch?

Thank you for your time, and I look forward to contributing!

Hey @Akilan247 , you are correct, you've commented on the PR of the issue that the PR is open for the issue. We have many issues open in the repo: https://github.com/eclipse-sw360/sw360/issues

You can take anyone which suits your area of interest. You can leave a comment on it and we can assign it to you.

[Akilan247]

Hi @GMishx ,

Thank you for the clarification and for sharing the link. I’ll go through the open issues and look for ones related to authentication, security, or REST API improvements. Once I find a suitable one, I’ll leave a comment on the issue so it can be assigned to me.

Looking forward to contributing!