How to handle "RemoveAll" in protected grant store implementation against Redis

[flq]

I have a question where maybe you can help me out.

We have an IPersistedGrantStore implementation against Redis. When we store an incoming grant we store it by the key (as it is the thing with which it is retrieved again).

But on logout, Duende apparently calls RemoveAll and the provided "Filter" provides a "Session", from which I wouldn't know how to derive the Key from.

Right now, we throw a not implemented essentially, but this means we leave remnants of the previous login in cache.

Any ideas if we can do better?

[khalidabuhakmeh]

From the internal discussion, thanks @wcabus, we would probably lean on Redis's expiration functionality and let your Redis instance handle cleanup more efficiently, without huge spikes in resource consumption. https://redis.io/docs/latest/commands/expire/