Gitter OAuth session persistence after upstream credential revocation
Gitter OAuth session persistence after upstream credential revocation This concerns the Gitter web application using OAuth 2.0 with GitHub or GitLab as the identity provider. A user revokes Gitter's OAuth authorization in the provider settings, expecting the linked Gitter session to end immediately. Gitter delegates credential expiration to the third-party p