A modern programming language that makes developers happier.

kotlinlang

I also have a question about authentication. When a user logs out, how do we invalidate the UserIdPrincipal and clear out the UserPasswordCredential?

this is what I do:
```call.sessions.clear&lt;User&gt;()```

if the UserPrincipal object is still in existence?

I don't know the internals. But I believe this code that I'm using sets up an internal storage of Users:
```        cookie&lt;User&gt;(USER_SESSION, SessionStorageMemory()) {
            cookie.path = "/"
        }```
I believe calling call.sessions.clear will clear the cookie in the response, and also remove the user from internal storage.