hard20 pts · first answer countstesting-fundamentalssecurity-testing

Token still works after logout

After logging out in the app, you resend an old API request with the same access token and it still returns data. What does this show?

A.The token was refreshed correctly during logoutB.Logout only cleared the client; the server never revoked itC.The API response is cached by the browserD.This is normal and expected for all secure systems

Discussion 0

Join free to post in the discussion.

Token still works after logout

Discussion 0

Related questions