Hey, I have a case where a user logs in to supertokens via a browser and its setting the cookies. Then I delete this user from Supertokens, not from the browser. After i delete the user from supertokens calling signout from the browser just return 200 OK but it doesnt remove the cookies from the browser.
Im guessing its because the User was deleted but is that an expected behaviour? Any way i can remove the cookies via signout API if the user was deleted?
r
rp_st
09/14/2022, 5:16 PM
hey @Diesel this might be a bug on our side. Can you please open an issue about this?
rp_st
09/14/2022, 5:18 PM
at the moment, the user will have to wait for the access token to expire before cookies are removed. You can still remove the cookies by overriding the sign out API and throwing an unauthorised error if the user doesn't exist, but i'll highlight that solution in the github issue.
SuperTokens is an open source authentication solution offering features like: Different types of login: Email / password, Passwordless (OTP or Magic link based).