2 ms·

I'm not sure about it, but what if Logout just removed token from client meanwhile "Logout from all devices" black lists token? I tend to believe that it could

I'm not sure about it, but what if Logout just removed token from client meanwhile "Logout from all devices" black lists token? I tend to believe that it could be used by gmail, but it's just a guess

poxrud 6y ago
If you're blacklisting tokens at any point in your application, you then need to check this blacklist.