User Security Token Invalidation

A system for invalidating user security tokens, the system comprising a cluster including one or more nodes configured to:

• provide a list of revoked security tokens;
• receive an indication of invalidating a user security token associated with a user;
• in response to the receiving the indication, add, by the one or more nodes, the user security token to the list of revoked security tokens, the user security token to the list of revoked security tokens, the user security token being encrypted using an authenticated encryption;
• and
• generate, by the one or more nodes, a key to be used for the authenticated encryption, the key being generated based on a shared secret between the one or more nodes of the cluster.

A non-transitory computer-readable storage medium having embodied thereon instructions, which when executed by at least one processor, perform steps of a method, the method comprising:

• providing, by one or more nodes in a cluster, a list of revoked security tokens;
• receiving, by the one or more nodes, an indication of invalidating a user security token associated with a user device;
• in response to the receiving the indication, adding, by the one or more nodes, the user security token to the list of revoked security tokens, by the one or more nodes, the user security token to the list of revoked security tokens, the user security token being encrypted using an authenticated encryption;
• and
• generating, by the one or more nodes, a key to be used for the authenticated encryption, the key being generated based on a shared secret between the one or more nodes of the cluster.