I Got Paid $0 from the Uber Security Bug Bounty

Re:I Got Paid $0 from the Uber Security Bug Bounty by user5994461 on Sunday December 24, 2017 @03:09PM (#16001101)

I recall that either OAuth or SAML doesn't have capabilities for logout.

[ Parent | on HN ]

Re:I Got Paid $0 from the Uber Security Bug Bounty by mdaniel on Sunday December 24, 2017 @04:46PM (#16001453)

I believe it's OAuth (same with JWT) in that there is no endpoint one can POST to in order to "logout," but the end-of-authorization concept exists in both OAuth and JWT via token revocation on the server-side

SAML has an actual logout endpoint

[ Parent | on HN ]