From 840a2539e50118c6c8d357b381c6f8572cd06bdf Mon Sep 17 00:00:00 2001
From: Ruud Senden <8635138+rsenden@users.noreply.github.com>
Date: Mon, 11 Sep 2023 10:05:33 +0200
Subject: [PATCH] chore: Update FoDSessionLogoutCommand (resolves #422)

---
 .../fod/_common/session/cli/cmd/FoDSessionLogoutCommand.java | 5 ++++-
 1 file changed, 4 insertions(+), 1 deletion(-)

diff --git a/fcli-core/fcli-fod/src/main/java/com/fortify/cli/fod/_common/session/cli/cmd/FoDSessionLogoutCommand.java b/fcli-core/fcli-fod/src/main/java/com/fortify/cli/fod/_common/session/cli/cmd/FoDSessionLogoutCommand.java
index 9bf43ef055..fa870516e6 100644
--- a/fcli-core/fcli-fod/src/main/java/com/fortify/cli/fod/_common/session/cli/cmd/FoDSessionLogoutCommand.java
+++ b/fcli-core/fcli-fod/src/main/java/com/fortify/cli/fod/_common/session/cli/cmd/FoDSessionLogoutCommand.java
@@ -28,6 +28,9 @@ public class FoDSessionLogoutCommand extends AbstractSessionLogoutCommand<FoDSes
     
     @Override
     protected void logout(String sessionName, FoDSessionDescriptor sessionDescriptor) {
-        // TODO Can we revoke a previously generated FoD token?
+        // FoD provides an undocumented /oauth/retireToken endpoint that we could potentially 
+        // call here. However, it's not documented and FoD dev stated that it's not necessary
+        // to explicitly retire tokens as they expire in 6 hours anyway. See the following issue
+        // for more information: https://github.com/fortify/fcli/issues/422
     }
 }