Upgrade to Pro — share decks privately, control downloads, hide ads and more …

Offline logout

Avatar for Igor Wojda Igor Wojda
March 26, 2018
Technology
2
320

Offline logout

Interesting logout use case.

Avatar for Igor Wojda

Igor Wojda

March 26, 2018
Tweet

More Decks by Igor Wojda

See All by Igor Wojda
Harmonizing Kotlin codebase with Konsist
Avatar for Igor Wojda igorwojda
2
200
Droidcon 2020. Why We Need Clean Architecture
Avatar for Igor Wojda igorwojda
4
1.6k
Modern, maintainable and coRRRect project
Avatar for Igor Wojda igorwojda
0
170
Why do we need Clean Architecture
Avatar for Igor Wojda igorwojda
23
8.7k

Other Decks in Technology

See All in Technology
＃普通の文系サラリーマンチャレンジ　 自分でアプリ開発と電子工作を続けたら人生が変わった
Avatar for tatsuya1970 tatsuya1970
0
750
サプライチェーン攻撃に学ぶModuleの仕組みと セキュリティ対策
Avatar for kuro kuro_kurorrr
3
790
Modern_Data_Stack最新動向クイズ_買収_AI_激動の2025年_.pdf
Avatar for Sagara sagara
0
130
生成AIで「お客様の声」を ストーリーに変える 新潮流「Generative ETL」
Avatar for Satoru Ishikawa ishikawa_satoru
1
220
避けられないI/O待ちに対処する:
Rails アプリにおけるSSEとasync gemの活用 / Tackling Inevitable I/O Latency in Rails Apps with SSE and the async gem
Avatar for moznion moznion
2
1.8k
Pure Goで体験するWasmの未来
Avatar for asuka askua
1
150
AWSのProductのLifecycleについて
Avatar for Takuya Shibata stknohg
PRO
0
290
DEFCON CHV CTF 2025 Write-up
Avatar for bata_24 bata_24
0
190
pprof vs runtime/trace (FlightRecorder)
Avatar for task4233 task4233
0
140
組織観点から IAM Identity CenterとIAMの設計を考える
Avatar for NRI Netcom nrinetcom
PRO
1
130
Optuna DashboardにおけるPLaMo2連携機能の紹介 / PFN LLM セミナー
Avatar for Preferred Networks pfn
PRO
1
680
AIコーディングとエンジニアリングの現在地 / A Snapshot of AI Coding and Engineering(Sept. 2025)
Avatar for ar_tama ar_tama
0
160

Featured

See All Featured
Faster Mobile Websites
Avatar for Dean Hume deanohume
310
31k
Music & Morning Musume
Avatar for Bryan Veloso bryan
46
6.8k
How To Stay Up To Date on Web Technology
Avatar for Chris Coyier chriscoyier
791
250k
The Invisible Side of Design
Avatar for Vitaly Friedman smashingmag
301
51k
What’s in a name? Adding method to the madness
Avatar for Product Marketing Alliance productmarketing
PRO
23
3.7k
The Pragmatic Product Professional
Avatar for Laura Van Doore lauravandoore
36
6.9k
Raft: Consensus for Rubyists
Avatar for Patrick Van Stee vanstee
139
7.1k
"I'm Feeling Lucky" - Building Great Search Experiences for Today's Users (#IAC19)
Avatar for Dan Newman danielanewman
229
22k
Cheating the UX When There Is Nothing More to Optimize - PixelPioneers
Avatar for Stéphanie Walter stephaniewalter
285
14k
Unsuck your backbone
Avatar for Amy Palamountain ammeep
671
58k
Design and Strategy: How to Deal with People Who Don’t "Get" Design
Avatar for Morgane Peng morganepeng
132
19k
Practical Tips for Bootstrapping Information Extraction Pipelines
Avatar for Matthew Honnibal honnibal
PRO
23
1.5k

Transcript

  1. Solving offline logout By Igor Wojda @igorwojda

  2. Not so long long time ago...

  3. Username & password Login request Other request Other request

  4. Why this is not very secure?

  5. Username & password

  6. Solution?

  7. Token 209eb9bb-2f6c-40d6-a9b9-912257492b61

  8. Token

  9. Token Renewal Timeout

  10. Token per client

  11. Token invalidate

  12. Online Logout

  13. Online logout Logout Request Additional operations

  14. Offline Logout

  15. Offline logout Logout Request X No network

  16. Option 1 – delete device token instantly Logout Request X

    No network

  17. Option 2 – delete device token device when online Logout

    Request X No network

  18. Logout user latter using the token Remove token instantly Goals

  19. Solution?

  20. Token Logout token Authentication token

  21. Token Press logout Is online? Delete authentication token Logout (hit

    logout endpoint sending logout token) Job scheduler runs logout job Invalidate both tokens Unregister device from receiving notifications NO Schedule logout Job YES Is online? YES

  22. • https://android.jlelse.eu/solving -offline-logout-problem- f3b50da49e7eTable salt • https://www.owasp.org/index.p hp/Session_Management_Cheat _Sheet#Session_Expiration •

    https://security.stackexchange. com/questions/29988/what-is- certificate-pinning Materials Worth reading

  23. Thanks! ANY QUESTIONS? You can find me at @igorwojda [email protected]