Skip to content

Commit

Permalink
docs(kratos): invalidate sessions after recovery
Browse files Browse the repository at this point in the history
  • Loading branch information
aeneasr committed Mar 4, 2022
1 parent 29ccf49 commit b7764f1
Showing 1 changed file with 16 additions and 0 deletions.
16 changes: 16 additions & 0 deletions docs/kratos/guides/account-recovery-password-reset.mdx
Original file line number Diff line number Diff line change
Expand Up @@ -88,3 +88,19 @@ You also need to enable account recovery and have the `link` method enabled:
That all that's needed! For more information on implementing the UI and details
about the payloads, head over to the
[Account Recovery Documentation](../self-service/flows/account-recovery.mdx)!

## Invalidate Other Sessions

To invalidate all other sessions upon successful account recovery, add the
`revoke_active_sessions` hook to:

```diff
selfservice:
flows:
recovery:
enabled: true
ui_url: http://127.0.0.1:4455/recovery
+ after:
+ hooks:
+ - hook: revoke_active_sessions
```

0 comments on commit b7764f1

Please sign in to comment.