diff options
Diffstat (limited to 'docs')
| -rw-r--r-- | docs/access.md | 2 | ||||
| -rw-r--r-- | docs/openapi.yaml | 2 |
2 files changed, 2 insertions, 2 deletions
diff --git a/docs/access.md b/docs/access.md index 3818b04..682b22b 100644 --- a/docs/access.md +++ b/docs/access.md @@ -96,7 +96,7 @@ curl -H "Authorization: Bearer ct1.…" http://other-node:3000/store then the user logs in again. A refreshed token may say less (`limit`), never more. * **Revoking**: a user disabled or removed is refused at once; all of a user's tokens, by the user (`POST /auth/logout`) or by one who may manage users (`DELETE - /admin/users/{name}/tokens`), which sets `tokensNotBefore` in its entry: tokens issued + /admin/users/{name}/tokens`), which sets `_continuum/logouts/<name>`: tokens issued before aren't taken any more. A token of a node forgotten by the swarm isn't taken either. In a swarm without a registry, a token is taken until it expires. * **What it means to trust**: any member could sign a token for any user, as it could diff --git a/docs/openapi.yaml b/docs/openapi.yaml index 742a013..1954dc0 100644 --- a/docs/openapi.yaml +++ b/docs/openapi.yaml @@ -836,7 +836,7 @@ paths: post: tags: [Auth] summary: End all of your logins - description: Every token of the user, of every login, no longer taken (`tokensNotBefore`). + description: Every token of the user, of every login, no longer taken (`_continuum/logouts/<name>`). responses: '204': { description: Done. } '409': { description: No user registry; tokens are taken until they expire. } |