···8686 http.Redirect(w, r, "/app", http.StatusFound)
8787 }
88888989-Finally, sessions can be resumed and used to make authenticated API calls to the user's host:
8989+Sessions can be resumed and used to make authenticated API calls to the user's host:
90909191 // web services might use a secure session cookie to determine user's DID for a request
9292 did := syntax.DID("did:plc:abc123")
···114114115115The [ClientSession] will handle nonce updates and token refreshes, and persist the results in the [OAuthStore].
116116117117-TODO: logout
117117+To log out a user, delete their session from the [OAuthStore]:
118118+119119+ if err := oauthApp.Store.DeleteSession(r.Context(), did); err != nil {
120120+ return err
121121+ }
118122*/
119123package oauth