Hi list, good morning,
What do you think is the correct way to invalidate the token issued by
the STS?
Invalidating the session is not forcing a new basic authentication when
we try to access the secured resource again.
Any suggestion?
Thanks in advance.
