Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Make OP-initiated logout stateless #3836

Open
5 tasks done
alnr opened this issue Sep 13, 2024 · 1 comment
Open
5 tasks done

Make OP-initiated logout stateless #3836

alnr opened this issue Sep 13, 2024 · 1 comment
Labels
feat New feature or request.

Comments

@alnr
Copy link
Contributor

alnr commented Sep 13, 2024

Preflight checklist

Ory Network Project

No response

Describe your problem

OP-initiated logouts hit the database many times and leave stale rows in the database without a creation or expiration date.

Describe your ideal solution

Should be pretty straightforward to use the stateless AEAD-based flow used in the Authorization Code grant for this purpose as well, allowing us to completely drop this table and make logouts much faster as well.

Workarounds or alternatives

Add expiration dates to logout requests and let TTL jobs/janitor handle the cleanup.

Version

all

Additional Context

No response

@alnr alnr added the feat New feature or request. label Sep 13, 2024
@aeneasr
Copy link
Member

aeneasr commented Sep 16, 2024

As a workaround, we added expiry and requested at times to the table.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
feat New feature or request.
Projects
None yet
Development

No branches or pull requests

2 participants