Logging Out Of The App

[dominic-ks]

There is currently no specific provision for logging out of the application, and it is unclear how this should be handled on the WordPress site with the currently authorised application.

It would be possible to delete the stored credentials with localStorage.clear(); generically, or localStorage.remove(); but this will required you knowing the key where it is stored. Currently this is 'wp_rest_app_YOUR_APP_ID', which is set to allow multiple instances if required.

Once this information is deleted, any stored credentials can no longer be used as no one other than the WordPress site will know about them, so, while re-authorising is perfectly possible, logging in and out will create a large number of authorisation records for the same app in the users profile. This may not be an issue specifically but doesn't seem to be a tidy way of handling this. It could be possible to periodically remove the credentials from the WordPress site if they have not been used in x days.