XF 2.2 Is there a way to log out a user?

[BubbaLovesCheese]

Is there a way to log out a user from xenforo? Either by using the API, or perhaps deleting their cookie?

Thanks.

 

[Paul B]

There's nothing built in which will do that.

Cookies are stored on the member's device.

 

[BubbaLovesCheese]

Sure, but if you can set a cookie on a user's computer, can't you also delete it? Or modify it to log them out?

Or perhaps you can adjust their user_group to unconfirmed?

 

[Paul B]

It doesn't work like that.

What are you actually trying to do?

 

[BubbaLovesCheese]

I have a website where users create accounts and log in, and I have a seperate xenforo installation.

1. When a user creates an account on my website, then an API post creates a xenforo account for them.
2. When the user clicks the forum URL, then the API will create a xenforo login token.
3. And when a user logs out of my website, then I want them logged out of xenforo too.

 

[BubbaLovesCheese]

So I have not found a solution yet, but I have discovered:

1. If a user logs out of MyWebsite, I could POST a request to xenforo to change his status to "unconfirmed". This would make the forum "view only" for him. However, he would still be logged in, and generating a different login-token for another user would not log him out. This would only prevent him from using the forum.
2. If a user logs out of MyWebsite, I could delete or reset their xenforo cookie with yesterday's expiry date (as discussed here). However, the user would still still remain logged in as normal until he physically closes his browser, at which time he will be logged out.