Hi team! I am using Thoughtspot Embed SDK to embed a liveboard into an application and we are currently trying to use Token auth with Cookies. We want to make sure that when a user logs out of our application that their TS session gets invalidated, requiring them to retrieve a new token. Within the application, I tried calling the
logout()
logout()
SDK method when a user logs out, however this doesn't always work:
- If the user is in another part of the app (a different SPA that is part of the same application), then
logout
logout
doesn't actually invalidate the session. - In addition, if we try to
logout
logout
the user before they initialize the Thoughtspot embed, it also won't work.
In the cases above, the user will still be able to log in to Thoughtspot without needing to request a new token.
We were thinking maybe we'll have to manually call the REST API to logout the user, do you know how we would go about doing this? Or if there is an easier way? Thanks!