Is there any way to expire or revoke bearer access token on logout event (before it’s expires_in time which is set in issued token) of dot net core application

answering my own question: here is a statement from an auth0 person confirming that login tokens are impossible to revoke: [image] Revoking Access Tokens Help Hi @veetil09 , Welcome to the Community! Auth0 Access token are stateless bearer tokens by design, this means th…

Hello @nitin.neetu , As far as I know there is no way to revoke tokens at this time, but I believe this capability is on the roadmap for this year or next.

is there a way to get an official confirmation from the auth0 team? (or are you representing auth0, @markd ?). if we are going to put this service at the core of our security, it’d be nice to know this.

Hello @markmark_kel , I don’t work for Auth0. I’m just a customer and so not authorized to speak to Auth0’s roadmap. All I can say is keep an eye on the changelog. Auth0 is constantly rolling out new capability and I think you may find it interesting. [image] Auth0 Changelog Advanced id…

Thanks a lot for sharing the link to the changelog here Mark!

Is there any way to expire or revoke bearer access token on logout event of dot net core application

JWT.io

markmark_kel June 23, 2023, 11:30pm 4

answering my own question: here is a statement from an auth0 person confirming that login tokens are impossible to revoke:

Topic		Replies	Views
Does Auth0 prevent the user to be logged in at two different places? Archived authentication-api	9	5818	May 10, 2019
Having Trouble on Remove Auth0 Session When Logout From Front End Archived auth0	2	5354	September 26, 2019
Expire access token when Logout Get Help logout , auth0 , access_token	2	8080	July 19, 2024
Revoking Access Tokens Archived auth0 , api	3	3959	April 2, 2020
How to destroy JWT token when signout Archived jwt	1	11394	December 5, 2017

Is there any way to expire or revoke bearer access token on logout event of dot net core application

Related topics