I am developing a REST API with .NET Core 6 using an OAuth 2 authentication. I need a login which does:
- authenticate the user using the REST API
For this, I am using
AspNet.Security.OAuth.ArcGIS and basically the Server-Enabled Workflow. Everything works fine until I sign out.
When I sign out, the cookie is removed and I have no access to REST API any more. So far so good but the
access_token is not invalidated. I can still use the token to access ArcGIS web services.
I understand that there is no logout option available with
AspNet.Security.OAuth.ArcGIS. So I was looking into alternative ways how to invalidate the token:
/oauth/revokeToken: not working with this kind of token
How can I invalidate an
Some of the resources I used: