Hi, I have built a set up where authentication is performed in a front end application and the resulting access token is used for authenticating the user with the back end API. Now, if a user were to logout, the access token is still valid and therefore, the user is able to perform API actions even…

Invalidating an access token when user logs out

john.gateley August 21, 2020, 1:29pm 10

That is one of the many advantages of the Universal Login Page over embedded.

John

Topic		Replies	Views
Expire access token when Logout Get Help logout , auth0 , access_token	3	7797	July 19, 2024
Any way to kill a token upon logout? (2020 edition) Get Help logout , jwt	2	4546	March 21, 2020
Invalidating an Access Token after User Logout Knowledge Articles token , api , invalidate , log-out	1	22743	February 27, 2023
How to destroy JWT token when signout Get Help jwt	2	11203	March 2, 2018
Logging user out when they change their password Get Help access-token , sessions	7	154	February 5, 2025