From c5e83655bca9e9f5f2dfccc84ba097bb809c3929 Mon Sep 17 00:00:00 2001
From: JuliDi <20155974+JuliDi@users.noreply.github.com>
Date: Fri, 21 Nov 2025 11:56:06 +0100
Subject: [PATCH] set refresh_token to None when ClearSessionFlag is set

---
 src/middleware.rs | 1 +
 1 file changed, 1 insertion(+)

diff --git a/src/middleware.rs b/src/middleware.rs
index 5d0deab..4f66352 100644
--- a/src/middleware.rs
+++ b/src/middleware.rs
@@ -298,6 +298,7 @@ where
             let has_logout_ext = response.extensions().get::<ClearSessionFlag>().is_some();
             if let (true, Some(mut login_session)) = (has_logout_ext, login_session) {
                 login_session.authenticated = None;
+                login_session.refresh_token = None;
                 session.insert(SESSION_KEY, login_session).await?;
             }