3 ms·
What better tool do you suggest that can handle logout? It's 2020 and there are none. OpenID Connect with JWT handles logout just fine if you really want it. C
by user5994461 6y ago
What better tool do you suggest that can handle logout? It's 2020 and there are none.
OpenID Connect with JWT handles logout just fine if you really want it. Call the /oidc/tokeninfo to check the token is valid instead of verifying the signature offline. Of course this doesn't have the benefits of a decentralized token anymore. Can't have the cake and eat it too.
- nextaccountic 6y agoDoing regular, boring authentication using user/password just supports logout out of box.
- poxrud 6y agoSo regular cookie session based auth? There are drawbacks such as managing session state on the server, and increased latency and cpu load, since you now have to have a db call on every action.
- closeparen 6y agoThe argument is that this DB call, or something much like it, is inherently necessary to support logout. It's not something unnecessary that can be optimized away; getting rid of it entails losing functionality.