Feature: Remove refresh token from Active devices on logout Description: When a user logs out of a SPA, calling the logout endpoint does not revoke the refresh token. This leaves it available for use if it is compromised on the client-side or in transit. The revoke refresh token endpoint can be cal…

Revoke Refresh Token on Logout

david.riley October 13, 2023, 4:23pm 8

+1 Here. It would be really nice have this.

Topic		Replies	Views
Unable to revoke refresh tokens Get Help auth0 , refresh-tokens	2	2173	December 21, 2022
Limit number of active user sessions by revoking refresh tokens upon login? Get Help jwt , actions	2	3540	March 31, 2021
Invalid Refresh Token - Take 3 Get Help refresh-tokens	2	3625	December 18, 2018
Logout user once refresh token expires, instead of making call to /authorize endpoint to get new access and refreshtoken Get Help classic-universal-login-experience , login-experience	3	4176	February 16, 2023
Ability to revoke access token at logout Product Feedback auth0	6	5739	September 8, 2021