Struct RevokeTokenBroadcast
Broadcast sent by the client during an explicit logout to ask the LoginServer to
revoke its currently-held auth token before its TTL expires. The token is sent
as the raw HMAC-signed bytes the LoginServer originally issued (and which the
client decrypted into memory on SrpSuccess). The server hashes the bytes via
TokenService.HashToken and matches the row in IAuthTokenService.
Security note: this broadcast is sent over the FishNet transport without additional encryption; the server's AES-GCM auth channel has typically been torn down by the time the user logs out. Because the only purpose is to revoke the token the eavesdropper would have captured anyway, this is safe.
public struct RevokeTokenBroadcast : IBroadcast
- Implements
-
IBroadcast
- Inherited Members
Fields
Token
Raw (HMAC-signed) auth token bytes the LoginServer originally issued.
public byte[] Token
Field Value
- byte[]