Invalidating the application session on logout

[mohammad.akbar]

Hi,

I’m using react-spa and currently encountering an issue regarding session management across multiple tabs within my application. Specifically, I’ve noticed that when I log in to my application on two separate tabs and subsequently log out from one of them, I’m still able to perform operations on the second tab until I manually refresh the page.

I am seeking advice and suggestions to implement a solution that can invalidate the session on the application level, effectively ensuring consistent and secure session management.

Any insights or guidance on this matter would be greatly appreciated.

Thank you.

[dawid.matuszczyk]

Hi @mohammad.akbar

Welcome back to the Auth0 Community!

Thanks for posting your question.

I’ve found that one of the user had similar question to your a while back I’m reposting provided solution:

How to check if user has logged out in another tab?

It looks like if you set the cacheLocation on the Auth0Provider to ‘localstorage’ other tabs will be able to pick up that the user has logged out. ReactDOM.render( <Auth0Provider domain={config.domain} clientId={config.clientId} audience={config.audience} redirectUri={window.location.origin} onRedirectCallback={onRedirectCallback} useRefreshTokens={true} cacheLocation="localstorage" > <App /> </Auth0Provider>, document.getElementById("root") ); Note abou…

I hope it will help you!

Thanks, and have a great day!

Dawid