Provider session logout with Passport Strategy about node-openid-client

[panva]

How can I retrieve the id_token_hint or revoke any remaining access_token – are they accessible somewhere or would it be helpful to extend the Passport Strategy itself to encapsulate these things in some form of passport.logout()?

The strategy does not and will not take care of storing tokens for you, it's too specific to each and every environment. You must store them using your own mechanism and retrieve and revoke them in your logout route handler. Use your latest received id_token as your id_token_hint value.

[mshwery]

@panva thanks for the follow up – I took your advice and ended up using a store (soon to be redis) to keep track of subs and their id_token and access_token. I revoke if possible, and otherwise send on the id_token as the id_token_hint for the logout flow.