Skip to content

[TOL-2311] Add --force to logout paths in case revoke on server fails#25

Merged
omc-tollbit merged 1 commit into
mainfrom
ory/TOL-2311/logout-force-clears-tokens
Jul 21, 2026
Merged

[TOL-2311] Add --force to logout paths in case revoke on server fails#25
omc-tollbit merged 1 commit into
mainfrom
ory/TOL-2311/logout-force-clears-tokens

Conversation

@omc-tollbit

Copy link
Copy Markdown
Collaborator

What does this PR do

  • tollbit auth logout now fails closed when it can't revoke the refresh token server-side, instead of leaving credentials on disk with a confusing error.

    • Default: if revocation can't reach the server, local credentials are kept and the command exits non-zero with a clear message ("you're still logged in, retry when online").
    • --force: clears local credentials even when revocation fails, with a warning — the token is revoked at your next login or expires within 30 days.
  • Both logout and logout --all share the behavior (via ClearAuthTokens). auth set is unchanged.

@omc-tollbit
omc-tollbit merged commit 1f5c141 into main Jul 21, 2026
2 checks passed
@omc-tollbit
omc-tollbit deleted the ory/TOL-2311/logout-force-clears-tokens branch July 21, 2026 17:18
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant