<html>
<head>
<meta content="text/html; charset=windows-1252"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<div class="moz-cite-prefix">On 24/02/16 10:58, Satyajit Das wrote:<br>
</div>
<blockquote
cite="mid:CA+oCsRo_zkZMb=A+XxDi6_g3UY-HHO_eKyYi7nwHpbocX6NynQ@mail.gmail.com"
type="cite">
<div dir="ltr">Hi Team we are facing the below issue with logout.
<div><br>
</div>
<div>i use login/logout restful service:</div>
<div><br>
</div>
<div>after login</div>
<div>i get tokenid say "t1" and refreshtokenid say "rt1"<br>
<div><br>
</div>
<div>1) We have registered a webservice as a keycloak client
(example demo123) with access type as bearer.</div>
<div>2) When I call the logout rest service:</div>
<div><br>
</div>
<div>if (isPublic()) { // if client is public access type
formparams.add(new
BasicNameValuePair(OAuth2Constants.CLIENT_ID, "demo123"));
} <br>
</div>
<div><br>
</div>
<div>URI logoutUri =
KeycloakUriBuilder.fromUri(getBaseUrl(request) + "/auth")
.path(ServiceUrlConstants.TOKEN_SERVICE_LOGOUT_PATH)
.build("RealmName");<br>
</div>
<div><br>
</div>
<div>the logout gives 204 for client's access type as open.</div>
<div><br>
</div>
<div>but when i again hit the service with the token id "t1"
after logout.</div>
</div>
<div>Still i can get the response. <b>Note this response doesnt
hit keycloak</b>.</div>
</div>
</blockquote>
Yes, it works this way and that's why we suggest to use short
lifetimes for accessToken (1 minute). This means that access token
needs to be refreshed every 1 minute and the request for refreshing
token actually needs to hit Keycloak server (in your case, refresh
won't success because you already did logout).<br>
<br>
Marek<br>
<blockquote
cite="mid:CA+oCsRo_zkZMb=A+XxDi6_g3UY-HHO_eKyYi7nwHpbocX6NynQ@mail.gmail.com"
type="cite">
<div dir="ltr">
<div><br>
</div>
<div>Regards,</div>
<div>Satya</div>
</div>
<br>
<fieldset class="mimeAttachmentHeader"></fieldset>
<br>
<pre wrap="">_______________________________________________
keycloak-user mailing list
<a class="moz-txt-link-abbreviated" href="mailto:keycloak-user@lists.jboss.org">keycloak-user@lists.jboss.org</a>
<a class="moz-txt-link-freetext" href="https://lists.jboss.org/mailman/listinfo/keycloak-user">https://lists.jboss.org/mailman/listinfo/keycloak-user</a></pre>
</blockquote>
<br>
</body>
</html>