Support for token revocation on SignOut in OAuthMiddleware
Open
area-auth
- Dominant language
- C#
- Stars
- 38.4k
- Forks
- 10.9k
- Avg merge
- 2d 5h
- Merged PRs (30d)
- 276
Description
To invalidate refresh tokens when the user signs out, it would be great if the OAuthMiddleware could support OAuth 2.0 Token Revocation ([RFC 7005](https://tools.ietf.org/html/rfc7009)).
Related to #1236, I'm interested to consider a PR to add this support.
Contributor guide
Assessment
This issue has not been assessed yet.