Logout doesn't work for me
-
Hi
I've implemented login, register and logout API with spring boot.
I'm testing this with postman and flow is next:- register user
- login with email and password -> get accessToken and refreshToken in response
- check can i access with accessToken to some page that need authorization
- after that works i go to logout api and send refreshToken as param, but after it return me status OK (200) then I try again with same accessToken access to API that need authorization and it return me data instead of error that I'm unauthorized
What could be problem? @dan
-
Heya,
JWTs are stateless tokens of identities. If you want a JWT to be revoked after someone has logged out from FusionAuth, you need to tie state back in.
See this article for various options for revoking JWTs: https://fusionauth.io/learn/expert-advice/tokens/revoking-jwts
