1
Automatically Logout users in cases when persistSession is false and the user closes the browser window
Source: supabase/supabase#3384 · opened by @chipilov
It seems that currently the only mechanism for removing or revoking refresh tokens is: - to send a refresh token request (in this case the refresh token used to refresh the access token is marked as revoked and a new refresh token is issued); - to logout (in this case all refresh tokens for the user are removed; However, if an app sets the "persistSession" param of the SupbaseClient object to false, this means that if the user closes the browser window, they will be implicitly logged out since the access token will be lost. Maybe in such cases (i.e. ONLY when "persistSession" is false), the client can automatically send a logout request when the window.onunload even is fired. One potential issue with this is that the user will also be logged out on any other open windows. Hence, the automatic logout request might also be made configurable in the SupabaseClient constructor. To be honest, not sure if it is better to add yet another config to the cons…
No pledges yet. Be the first to back this.
Comments
Similar requests
Accept `auth` options passed to `createPagesServerClient`
1 vote · 0 comments
Auth UI - Give the option " Use Another Account " in order to login
2 votes · 0 comments
Windows browser in flutter for authentication.
1 vote · 0 comments
Request for documentation/tutorials on using supabase server-side
2 votes · 0 comments
Enable the use of `AllowUnverifiedEmailSignIns` for Email provider
4 votes · 0 comments
No comments yet.