openid / AppAuth-JS

JavaScript client SDK for communicating with OAuth 2.0 and OpenID Connect providers.
Apache License 2.0
975 stars 162 forks source link

Document revocation flow #200

Open justin-barca-at-camis opened 2 years ago

justin-barca-at-camis commented 2 years ago

Expected Behavior

[REQUIRED] Describe expected behavior

There should be clear instructions on how to revoke a token.

Describe the problem

There's no mention of token revocation in the readme and the electron demo just disposes of the tokens in memory but does not revoke the token

[REQUIRED] Actual Behavior

Sign out in electron demo should revoke tokens

[REQUIRED] Steps to reproduce the behavior

N/A

[REQUIRED] Environment

NOTE: there is mention of revocation in https://github.com/openid/AppAuth-JS/issues/71