Upgrade to Pro — share decks privately, control downloads, hide ads and more …
Sign up for free

Offline logout

Avatar for Igor Wojda Igor Wojda
March 26, 2018
Technology
380
2

Offline logout

Interesting logout use case.

Avatar for Igor Wojda

Igor Wojda

March 26, 2018

More Decks by Igor Wojda

See All by Igor Wojda
Harmonizing Kotlin codebase with Konsist
Avatar for Igor Wojda igorwojda
2
280
Droidcon 2020. Why We Need Clean Architecture
Avatar for Igor Wojda igorwojda
4
1.7k
Modern, maintainable and coRRRect project
Avatar for Igor Wojda igorwojda
0
200
Why do we need Clean Architecture
Avatar for Igor Wojda igorwojda
23
8.9k

Other Decks in Technology

See All in Technology
正解のない研修に放り出されて / Being thrown into a training program with no right answers
Avatar for akira ohno ohnoeight
1
150
生成AI時代、PMは事業責任者に進化するともっと面白い〜PMだからこそ事業構造を動かせる時代に〜
Avatar for KAKEHASHI kakehashi
PRO
0
880
外国人エンジニアがVueプロトタイプで仕様を合わせている話 / Vue Fes Japan 2026 LT
Avatar for Wan Noh eluwing
0
170
[re:Invent2026事前勉強会(有志開催)]続きは、ラスベガスの廊下で / continue-in-the-vegas-hallway
Avatar for sh_fk2 sh_fk2
0
280
CSS2026：OWS研究会・招待講演「世界観を、実装する」
Avatar for atsushi, sada atsush1_sada
2
340
freeeにおけるSoftware Factory
Avatar for freee freee
PRO
0
530
推論基盤と Scale-Up Interconnect の現状と制約から俯瞰する技術動向
Avatar for Masayuki Kobayashi markunet
2
320
AI駆動開発における開発環境のセキュリティの考え方
Avatar for Hiroki YAMAMOTO yamahiro
2
620
アカウント統制の健康診断
Avatar for KenichiNakamura kenichinakamura
1
200
AWSDirectConnectの構築の進め方を整理してみた
Avatar for まちや masa_my
1
200
AI駆動開発におけるハーネスエンジニアリングの勘所
Avatar for つくぼし tsukuboshi
1
790
構造で守らせる　データ・法務・セキュリティ・開発チームとつくる AI時代のデータガバナンスとデータ基盤のリアル
Avatar for LegalOn Technologies, Inc legalontechnologies
PRO
1
540

Featured

See All Featured
Scaling GitHub
Avatar for Zach Holman holman
464
140k
Docker and Python
Avatar for Tania Allard trallard
47
4.2k
VelocityConf: Rendering Performance Case Studies
Avatar for Addy Osmani addyosmani
331
25k
Joys of Absence: A Defence of Solitary Play
Avatar for Sebastian Deterding codingconduct
1
550
The Impact of AI in SEO - AI Overviews June 2024 Edition
Avatar for Aleyda Solis aleyda
6
1.2k
The Art of Delivering Value - GDevCon NA Keynote
Avatar for David Neal reverentgeek
16
2.2k
実際に使うSQLの書き方 徹底解説 / pgcon21j-tutorial
Avatar for soudai sone soudai
PRO
203
77k
Product Roadmaps are Hard
Avatar for C. Todd Lombardo iamctodd
55
13k
Applied NLP in the Age of Generative AI
Avatar for Ines Montani inesmontani
PRO
4
2.5k
[Rails World 2026] Durable orchestration on Rails: from continuation to workflow
Avatar for Vladimir Dementyev palkan
1
910
世界の人気アプリ100個を分析して見えたペイウォール設計の心得
Avatar for Akihiro Kokubo akihiro_kokubo
PRO
74
43k
Principles of Awesome APIs and How to Build Them.
Avatar for Keavy McMinn keavy
128
18k

Transcript

  1. Solving offline logout By Igor Wojda @igorwojda

  2. Not so long long time ago...

  3. Username & password Login request Other request Other request

  4. Why this is not very secure?

  5. Username & password

  6. Solution?

  7. Token 209eb9bb-2f6c-40d6-a9b9-912257492b61

  8. Token

  9. Token Renewal Timeout

  10. Token per client

  11. Token invalidate

  12. Online Logout

  13. Online logout Logout Request Additional operations

  14. Offline Logout

  15. Offline logout Logout Request X No network

  16. Option 1 – delete device token instantly Logout Request X

    No network

  17. Option 2 – delete device token device when online Logout

    Request X No network

  18. Logout user latter using the token Remove token instantly Goals

  19. Solution?

  20. Token Logout token Authentication token

  21. Token Press logout Is online? Delete authentication token Logout (hit

    logout endpoint sending logout token) Job scheduler runs logout job Invalidate both tokens Unregister device from receiving notifications NO Schedule logout Job YES Is online? YES

  22. • https://android.jlelse.eu/solving -offline-logout-problem- f3b50da49e7eTable salt • https://www.owasp.org/index.p hp/Session_Management_Cheat _Sheet#Session_Expiration •

    https://security.stackexchange. com/questions/29988/what-is- certificate-pinning Materials Worth reading

  23. Thanks! ANY QUESTIONS? You can find me at @igorwojda [email protected]