For some reason Stormpath returns the user information as if the user had just been authenticated the first time a user logs out. So we need to track session intent in the application and make sure logouts stick. I think we can't use the same callback for login/logout as they get the same payload but the intent is different.
For some reason Stormpath returns the user information as if the user had just been authenticated the first time a user logs out. So we need to track session intent in the application and make sure logouts stick. I think we can't use the same callback for login/logout as they get the same payload but the intent is different.