Hacker News new | past | comments | ask | show | jobs | submit login

Surely you can revoke a session before it expires?



No you can't because you don't immediately know that the user's account has been suspended (assuming you're using an identity provider).




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: