> the main motivation for this question is, i'm trying to support logout For logout, you need to mainly clear the tokens from the cookies on the frontend and need to revoke that user's session. This can be done using the

revokeSession

function after the verifying the session. Calling

revokeAllSessionsForUser

will only revoke the session from the db and not the cookies. This means that in case access token blacklisting is not on, the current access token in the cookie will continue to work, until it expires. To make access token expire immediately, please see https://supertokens.io/docs/emailpassword/advanced-users/advanced-session/access-token-blacklisting