{"action":"opened","issue":{"url":"https://api.github.com/repos/lexik/LexikJWTAuthenticationBundle/issues/298","repository_url":"https://api.github.com/repos/lexik/LexikJWTAuthenticationBundle","labels_url":"https://api.github.com/repos/lexik/LexikJWTAuthenticationBundle/issues/298/labels{/name}","comments_url":"https://api.github.com/repos/lexik/LexikJWTAuthenticationBundle/issues/298/comments","events_url":"https://api.github.com/repos/lexik/LexikJWTAuthenticationBundle/issues/298/events","html_url":"https://github.com/lexik/LexikJWTAuthenticationBundle/issues/298","id":198132948,"number":298,"title":"Ignore expired tokens and let user continue unauthenticated","user":{"login":"ruudk","id":104180,"avatar_url":"https://avatars.githubusercontent.com/u/104180?v=3","gravatar_id":"","url":"https://api.github.com/users/ruudk","html_url":"https://github.com/ruudk","followers_url":"https://api.github.com/users/ruudk/followers","following_url":"https://api.github.com/users/ruudk/following{/other_user}","gists_url":"https://api.github.com/users/ruudk/gists{/gist_id}","starred_url":"https://api.github.com/users/ruudk/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ruudk/subscriptions","organizations_url":"https://api.github.com/users/ruudk/orgs","repos_url":"https://api.github.com/users/ruudk/repos","events_url":"https://api.github.com/users/ruudk/events{/privacy}","received_events_url":"https://api.github.com/users/ruudk/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2016-12-30T10:53:32Z","updated_at":"2016-12-30T10:53:32Z","closed_at":null,"body":"When the JWT token of a user is expired, a `JWTAuthenticationFailureResponse` is shown. Is there a way to not do that? And just stop authentication and let the user continue anonymous? \r\n\r\nCurrently, there is no way to do this by subscribing to the `JWTExpiredEvent` event. Since the event has a default `JWTAuthenticationFailureResponse` response that can only be overwritten (not set to null). \r\n\r\nI'm willing to create a PR for this use case, but first want to discuss the best approach. Any thoughts?\r\n"}}
{"actor":{"display_login":"ruudk"}}