This project is not covered by Drupal’s security advisory policy.
About
Module that adds the /oauth/logout endpoint. It works like /oauth/revoke but also deletes all sessions from the user of the given token.
This is very drastic, as the user is logged out everywhere, but there is currently no alternative. What we need first is that simple_oauth stores the session id per access token. Once that is the case, we can be more surgically precise.
Supporting organizations:
Time
Project information
Minimally maintained
Maintainers monitor issues, but fast responses are not guaranteed.Maintenance fixes only
Considered feature-complete by its maintainers.- Project categories: Access control
12 sites report using this module
- Created by berenddeboer on , updated
This project is not covered by the security advisory policy.
Use at your own risk! It may have publicly disclosed vulnerabilities.
Releases
1.0.0
released 14 August 2025
Works with Drupal: ^10 || ^11
Logout works for me (and on a production site)
Install:
