Novak
Novak

Reputation: 115

Clear tokens on end session

Is there possibility to automatically clear tokens for a given client when user performs end session? Or i have to manually clear them by calling token revocation endpoint (yes I'm working with reference tokens for this scenario)?

Upvotes: 0

Views: 1118

Answers (1)

leastprivilege
leastprivilege

Reputation: 18482

You can implement the SignOutAsync method in your user service. From there you know who the user is (the subject id) and can then delete the tokens using the token handle store.

Upvotes: 1

Related Questions