access: logouts apart from users' entries

_continuum/logouts/<name> holds when a user's tokens were last revoked,
written by the user itself or by one who may manage users, so users'
entries can be signed by their managers alone.

Auth plan M7.

2 files changed, 2 insertions, 2 deletions

diff --git a/docs/access.md b/docs/access.md
index 3818b04..682b22b 100644
--- a/docs/access.md
+++ b/docs/access.md
@@ -96,7 +96,7 @@ curl -H "Authorization: Bearer ct1.…" http://other-node:3000/store
   then the user logs in again. A refreshed token may say less (`limit`), never more.
 * **Revoking**: a user disabled or removed is refused at once; all of a user's tokens,
   by the user (`POST /auth/logout`) or by one who may manage users (`DELETE
-  /admin/users/{name}/tokens`), which sets `tokensNotBefore` in its entry: tokens issued
+  /admin/users/{name}/tokens`), which sets `_continuum/logouts/<name>`: tokens issued
   before aren't taken any more. A token of a node forgotten by the swarm isn't taken
   either. In a swarm without a registry, a token is taken until it expires.
 * **What it means to trust**: any member could sign a token for any user, as it could
diff --git a/docs/openapi.yaml b/docs/openapi.yaml
index 742a013..1954dc0 100644
--- a/docs/openapi.yaml
+++ b/docs/openapi.yaml
@@ -836,7 +836,7 @@ paths:
     post:
       tags: [Auth]
       summary: End all of your logins
-      description: Every token of the user, of every login, no longer taken (`tokensNotBefore`).
+      description: Every token of the user, of every login, no longer taken (`_continuum/logouts/<name>`).
       responses:
         '204': { description: Done. }
         '409': { description: No user registry; tokens are taken until they expire. }