I recently updated my internal instance to use SSO, and I want to force all users to re-login to validate their accounts against the other system. Can I force every user to logout or is the only way to do it one by one?

Any comments here @sam ? This would also be duplicated on the “my Discourse was compromised” topic.

UserAuthToken.destroy_all would do the trick, you also would want to revoke api keys so that is 2 additional tables to nuke, ApiKey and UserApiKey.

Is there a way to force a mass logout?

riking (Kane York) May 16, 2015, 12:43am 3

./launcher enter app
rails c
UserAuthToken.destroy_all

Topic		Replies	Views
How to log out all members? Support	4	2304	May 17, 2018
Mass Log Out All Users Support	1	561	November 29, 2022
Log out all users via API Feature	5	1375	December 12, 2017
Logout all users through the rails console Self-Hosting how-to	0	2730	July 26, 2018
How to programmatically log out lots of users Support	4	5071	December 17, 2018