Ash Authentication session management

Hi there.

You can define an action on your token resource that deletes the appropriate records. You can identify which records to destroy based on the contents of the subject field, which is a composite of the authentication resource’s subject_name and the primary key (eg: "user?id=abcd1234"). Thankfully we have AshAuthentication.user_to_subject/1 to help with that.

Since we don’t yet have bulk deletes, I would probably do something like this:

actions do
  # ...

  action :sign_out, :integer do
    argument :user, MyApp.User, allow_nil?: false

    run fn input, _ ->
      subject = AshAuthentication.user_to_subject(input.arguments.user)

      import Ecto.Query

      query = from t in MyApp.Token,
        where: t.subject == ^subject

      {count, _} = MyApp.Repo.delete_all(query)
      {:ok, count}
    end
  end
end

(I haven’t run this code, so I don’t know if it’s right, but hopefully gives you a hint what to do)