1 個回答
- 最新
- 最多得票
- 最多評論
0
Log out only invalidates the session.
You can call the global sign out , this signs out users from all devices. It also invalidates all refresh tokens that Amazon Cognito has issued to a user.
https://docs.aws.amazon.com/cognito-user-identity-pools/latest/APIReference/API_GlobalSignOut.html
Alternatively : If you want to invalidate the refresh token then the /oauth2/revoke endpoint revokes all of the access tokens that the specified refresh token generated. This is a POST hence this would be a custom signout flow since the log out only supports HTTPS GET
https://docs.aws.amazon.com/cognito/latest/developerguide/revocation-endpoint.html
已回答 2 年前
相關內容
- AWS 官方已更新 1 年前