[keycloak-user] Keycloak logout API not working properly

Erlend Hamnaberg erlend at hamnaberg.net
Wed Jan 2 05:21:01 EST 2019


You can't revoke access tokens. Make sure they have a sufficiently short
timeout.

/Erlend

On Mon, Dec 24, 2018 at 2:11 PM Shubham Akodiya <sakodiya at grepruby.com>
wrote:

> Hi,
>
> I'm using the log out API(
>
> https://localhost:8080/auth/realms/my-realm-name/protocol/openid-connect/logout
> )
> and sending all the required parameters i.r refresh_token, client_id and
> client_secret. The API working properly but the user can still able to use
> the access_token to access the APIs. How to revoke that access_token?
>
> Thanks,
> Shubham Akodiya
> _______________________________________________
> keycloak-user mailing list
> keycloak-user at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/keycloak-user
>


More information about the keycloak-user mailing list