How to log out user if I don't know them?

[riking (Kane York)]

This trick should still work:

Is there a "log_in" SSO API endpoint?

You can’t set cookies for another domain from the server, so that wouldn’t work Try giving the user a page with this on it: <embed src="https://discourse.example.com/session/sso" onload="window.location='/login_finished'" width=0 height=0> <div style="display:flex;justify-content:center;align-items:center"> <div class="loading-spinner"> <h1>Please wait, logging you into Discourse...</h1> <aside><a href="/login_finished">Click here if you don't want to wait</a></aside> <…