I’ve been reading docs trying to understand what series of step needs to be performed when end-user clicks to logout. To provide more context, basically, I have a RESTful API that is to be consumed from several kinds of clients (e.g: web apps,mobile apps).
So from the point of view of a web application: The user can have several sessions (on different machines). If the user logout of a single session other sessions have to remain active and valid. Any of the endpoints mentioned on the guide support that flow because there is a web client (id) unique and global. Therefore, revoking login and/or consent per client-id will immediately revoke other opened sessions.
Most likely I’m missing something here so I’d appreciate your help.
I haven’t tested flows for a mobile app but It would be nice to have some docs/guide explaining the logout flows from each kind of client (or scenario) that Hydra proposes/supports.