How do you terminate a twitch OAuth session

[BarryCarlyon]

@jng9230

I logged into my application through twitch, and then manually logged out.

All you can do here is revoke the access token.

@jng9230

After creating a new account which is not connected to twitch at all, the old twitch cookies including one called session still persisted in my application.

What you observed is you clicked the link to login with Twitch.
Twitch went “the connection is still active” and granted a new access token.
And it transparnetly authed

A full disconnect only occurs if the user goes ot their settings/connections page and revokes from there.

You would need to use force_verify to allow the user to switch accounts

@jng9230

From https://dev.twitch.tv/docs/authentication/validate-tokens: " the expectation is that your app should sign out the user and terminate the OAuth session"

Revoking the access token (or just not storing it at all and forgetting about it) is all you need to do here.