1개 답변
- 최신
- 최다 투표
- 가장 많은 댓글
0
Log out only invalidates the session.
You can call the global sign out , this signs out users from all devices. It also invalidates all refresh tokens that Amazon Cognito has issued to a user.
https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GlobalSignOut.html
Alternatively : If you want to invalidate the refresh token then the /oauth2/revoke endpoint revokes all of the access tokens that the specified refresh token generated. This is a POST hence this would be a custom signout flow since the log out only supports HTTPS GET
https://docs.aws.amazon.com/cognito/latest/developerguide/revocation-endpoint.html
답변함 2년 전
관련 콘텐츠
- AWS 공식업데이트됨 2년 전