Hacker News new | ask | show | jobs
by danogentili 811 days ago
If a 2FA password is configured, it is still required in order to login with a future auth token; however, even if it isn't set up, the fact that you have a future auth token means you have already logged in and then logged out on this specific device, so it's not a real issue (i.e. it's as if when logging out, you didn't actually log out but rather just hid the account in the UI, the future auth token is stored safely, in the same place as normal auth keys are + re-entering the 2FA password is still required).
1 comments

But if no 2FA password is configured, does this mean that there is no way to truly log out of a given client?