Skip to main content

FR-01.08 — Logout

Trigger: An authenticated user selects the logout action.

System shall:

  • Terminate the user's active authenticated session.
  • Remove/revoke the applicable authentication state.
  • Prevent the terminated session from accessing protected resources.

Acceptance Criteria:

  • PASS: User is logged out successfully.
  • PASS: The terminated session cannot access protected resources.
  • FAIL: A logged-out session remains authorized.