Is there a way to force a mass logout?

Support

AI 生成的摘要

The discussion revolves around forcing a mass logout on a Discourse instance after updating to use SSO. Juan wants to validate users’ accounts against another system. To achieve a mass logout, running UserAuthToken.destroy_all in the rails console, as suggested by riking and confirmed by sam, is a viable solution. Additionally, sam recommends revoking API keys by deleting entries from the ApiKey and UserApiKey tables.

1

I recently updated my internal instance to use SSO, and I want to force all users to re-login to validate their accounts against the other system.

Can I force every user to logout or is the only way to do it one by one?

3 
./launcher enter app
rails c
UserAuthToken.destroy_all
8

Any comments here @sam? This would also be duplicated on the “my Discourse was compromised” topic.

9

UserAuthToken.destroy_all would do the trick, you also would want to revoke api keys so that is 2 additional tables to nuke, ApiKey and UserApiKey.