Signing out now ends the session

Signed out means signed out

Miracle now revokes the exact matching WorkOS session before deleting its own account session. Other signed-in devices remain untouched, and the iPhone app stays inside the app instead of opening Safari.

The next login is deliberate

Every new login now requires interactive authentication instead of silently reusing an older AuthKit browser session. Existing sessions created before this release receive the same protection.

A failed request stays visibly signed in

If the logout request cannot reach Miracle or returns an invalid response, the app keeps the account and local data in place and explains that sign out did not finish. It no longer clears the screen while a live server session may remain.

Native sign out carries the same boundary

The iPhone PKCE handoff now preserves only the narrow WorkOS session identifier needed for logout. Access tokens and refresh tokens never enter Miracle's database.