Making Bearer token expire manually

Question

I have a Web API which is issuing Bearer Token after successful login check. And API is set with Token Expiration time as 1 day and its working fine.

What I want is to expire a that token before its scheduled time (like 1 hour) if user sends a log out request, so that token won't work after that.

Is it possible?

https://stackoverflow.com/questions/24552448/web-api-2-owin-authentication-signout-doesnt-logout — user3743744, Dec 12 '17 at 13:36

score 0 · Answer 1 · answered Dec 13 '17 at 05:45

As per my point of view, there is no need to expire generated token manually. Though you want to do so, you need to update(refresh) token expire time to the current request time, make sense?

But in that case, you will need to create a new token every time even if user logout and login before expiration time.

score 0 · Answer 2 · answered Dec 13 '17 at 09:29

0

Because tokens are stored on the client and not on the server, You can't manually invalid token. I had similar problem once, in this question

answered Dec 13 '17 at 09:29

garret

1,134
8
16

Making Bearer token expire manually

2 Answers2