SmartLink token expiration

brianbruff

Hi folks,

I've allowed a few people access to my flex to give them a taste.
I typically change the password when finished.

However tonight I noticed a user was still able to access my radio even though the password has changed.

I can only assume theres a long lived token on their PC that's not being invalidated when password changes occur.

Can anyone advise if this is the case and how I can possible invalidate all existing auth0 sessions to stop this?

David Decoons, wo2x

Did you deregister and re-register the radio after password change?

Dave wo2x

brianbruff

Hi David, no I did not, if it's that is the solution then brill, I can live with that.

Tnx a mill, Brian

brianbruff

deregistered and reregistered also, users still have access on their logged in sessions.

any other suggestions?

David Decoons, wo2x

Make sure you are on right SL acct when you deregister and re-register. Reboot radio too.

Open Help Desk ticket if all else fails.

Dave wo2x

brianbruff

tnx Dave

yes right account, no biggie, i can shutdown at router level and allow myself in via vpn and gossip, not a major issue for me

i might open a ticket just to see why when changing passwords all existing sessions are not invalidated.

brianbruff

for those who follow:

Opened a support ticket, the current workaround is to have 2x SmartLink accounts.

Register on the second account will invalidate the certificate or whatever token issued.

kr

Brian ei6lf