How to sign out user ( has access token ) from github app session

Hi there,

So I’m in step 3 of the oauth tutorial : https://developer.github.com/apps/building-oauth-apps/authorizing-oauth-apps/

I’m logged in as a user to my github app, I stored the access_token in a cookie, now I need to create a logout button, but for now I just delete the cookie since I couldn’t find a hint on the tutorials on how to revoke the access token.

So how do I correctly sign out the user ?

Thanks

Most of the time you’ll simply delete the cookie, even when the user clicks a “log out” button. You can also make the cookie auto-expire in a certain amount of time (24 hours, 7 days, or 30 days are common options). But if you want to revoke the access token, you should be able to use the Revoke an authorization for an application endpoint.

Let us know if you have more questions.

1 Like