LogoutUrl endpoint doesn't pull username to log/monitoring

[gparascandolo]

Hey @ksmith, this post explains why the /v2/logout endpoint is not applicable when Resource Owner Password flows are used:

Logout after Resource Owner Password login

The resource owner password credentials grant is stateless from the perspective of the identity provider/authorization server (in this case your Auth0 domain). This means that there’s no authentication session established as part of the flow so the /v2/logout endpoint is not applicable to this particular case. In the case of this grant the only thing you need to clean from your side is the actual token. In particular if your web application establishes an authentication session based on the out…