Destroys the session with the given session ID.
OptionaldeleteDeletes the session with the given logout token which may contain a session ID or a user ID, or both.
MCD resolver mode: When using multiple custom domains with a domain resolver,
implementations MUST filter on the iss field in addition to sub/sid to
ensure sessions are only deleted for the matching issuer. Custom domains on the
same tenant share signing keys, so failing to filter on iss allows a logout
token from one domain to delete sessions created by a different domain.
Gets the session from the store given a session ID.
Upsert a session in the store given a session ID and SessionData.
OptionalupdateOptional: update the session by its ID only if it already exists.
Return true if updated, false if not found.
Interface for a custom session data store.
TTL contract: every successful write method (
set,update) must reset the session TTL/expiry so that active sessions are not silently expired between requests.