Is there a way to force a mass logout?

UserAuthToken.destroy_all would do the trick, you also would want to revoke api keys so that is 2 additional tables to nuke, ApiKey and UserApiKey.

5 Likes