New idea

Logout api

Hi all, 

We have small web application built on top of the HighQ Api, following the documentation in the Authentication section, I can successfully allow the user to sign in and have the access token generated.

Documentation | HighQ Developer Community | HighQ Collaborate

 

But once the token is generated, I cannot sign the user out using Api, I can only force the user to do another login, but the old token is still valid.

Do we have any API to log the user out (or revoke the active access token)? 

 

 

Ha Nguyen Danh

  • Andrew Quinn ha ha, thank you so much.
    You are so active in this forum that I thought you are the developer of the API :P

  •

    Sorry Ha Nguyen Danh, I can't help you out here. You will have to reach out to your TR support staff and make your case. Your only (possible) option, at this point, is to set the token exipration to 30mins (the minimum). Even then, if someone has the refresh token they have a whole year in which to (re)generate tokens.

    Maybe TR support have some process that can be periodically run, to invalidate tokens for certain (API) client ID's? You would think there must be a background process that cleans up expired tokens already?

    I'm a customer just like you, and have no influence on the development of the API - if I did we'd have (event) subscriptions years ago!

  •

    Andrew Quinn can you help me on this?