Comment 2 for bug 1324984

Revision history for this message
Duncan Thomas (duncan-thomas) wrote :

Why is not revoking the token not an option? Even if services move to bearer tokens, revoking the token can still race with the last few operations run before logging out if people click fast enough, so it seems like a quite fundamental bug?