Log out all users via API

[typeoneerror (Benjamin Borowski)]

I’ve built a Discourse integration for our product that allows SSO with our product to a Discourse install. When a user is signed out on our app, I’m doing an API-backed POST via the log_out API. Is there a way to log all users out or change settings remotely? If our user disconnects the Discourse integration, I’d love to nullify their custom SSO settings and sign out all users without having to do 100s of POST requests.

[sam (Sam Saffron)]

You would need a plugin here with a custom http endpoint

[typeoneerror (Benjamin Borowski)]

Noted.

Is there a log out all users in the admin interface so I could document how to do this for customers who can’t install a plugin?

[sam (Sam Saffron)]

To log out every user on the system you would nuke all rows from the user auth tokens table

[fefrei (Felix Freiberger)]

I’ve documented Rails code that (in addition to doing other things) logs out all users and sends them the usual notification that there were logged out here, in case this helps you:

Re-purposing a Discourse installation for a yearly event

Another year has passed, and we followed the same procedure. This time, we used actual Ruby scripts instead of my crazy API-based approach – maybe this is useful to someone else: Log out and deactivate (almost) all users: protected_users = ["system", "codinghorror"] # do not process these users # get all users that should be logged out affected_users = User.all.select { |u| !(protected_users.include? u.username) } affected_users.each { |u| u.admin = false u.moderator = false …

[typeoneerror (Benjamin Borowski)]

This is great, thanks, Felix.