I observed that Authorization Bearer token is not invalidated after a logout.
Steps to produce
Step 1: Login to Nifi as usual.
Step 2: Copy the authorisation bearer token after the login from /nifi-api/access/token response.
Step 3: Make a request a curl request as below and observe http 200 response is received with status information.
Step 4: Log out from Nifi Console
Step 5: Repeat Step 3 and observe again http 200 response is received with status information even though the user has logged out.