Dfyjkt

I'm developing an application, the NodeJs (along with express) will be server side which will provide RESTfull service and Angular 6 will utilize the RESTfull API.
Now the problem is when a user change the password, then how to logout the user from all devices.

I'm using JWT for authentication.

It is bad practise to logout the user when it changes password unless user voluntarily opts to logout from all the devices:-

Once the user logout , then clears localstorage and redirect to login as:-

Just change the authorization token when user updates the password and check that token is still valid for each request. If not valid, gives 401 error and then redirect to login page.

logout()
/* clear your localStorage token /*
// redirect to login page 

interceptor.ts

 import Injectable from '@angular/core';
 import HttpRequest, HttpHandler, HttpEvent, HttpInterceptor from '@angular/common/http';
 import Observable from 'rxjs';

 @Injectable()
 export class JwtInterceptor implements HttpInterceptor 
 intercept(request: HttpRequest<any>, next: HttpHandler): Observable<HttpEvent<any>> 
 // add authorization header with jwt token if available
 let currentUser = JSON.parse(localStorage.getItem('currentUser'));
 if (currentUser && currentUser.token) 
 request = request.clone(
 setHeaders: 
 Authorization: `Bearer $currentUser.token`
 
 );
 

 return next.handle(request).do((event: HttpEvent<any>) => 
 if (event instanceof HttpResponse) 
 // do stuff with response if you want
 
 , (err: any) => 
 if (err instanceof HttpErrorResponse) 
 if (err.status === 401) 
 // redirect to the login route
 // or show a modal showing, we are redirecting to you login page.
 
 
 );
 

Refer Link:- https://medium.com/@ryanchenkie_40935/angular-authentication-using-the-http-client-and-http-interceptors-2f9d1540eb8

http://jasonwatmore.com/post/2018/05/23/angular-6-jwt-authentication-example-tutorial