注销后,我的firebase idToken仍然有效?

我的firebase前端有以下代码:

  document.querySelector('#sign-out').addEventListener('click', () => {
    firebase.auth().signOut().then(() => {
      document.location = '/sign-in';
    }, (error) => {
      console.error('Sign Out Error', error);
    });
  })

/sign-in

但是,当我导航到 /chatroom ,则认为我已登录。我的python/flask后端在端点上有以下代码:

@app.route("/chatroom")
def chatroom():
    if 'idToken' in request.cookies:
        id_token = request.cookies.get("idToken")
        try:
            decoded_token = auth.verify_id_token(id_token)
        except:
            print("INVALID TOKEN")
            return redirect(url_for("sign_in"))

        return render_template("chatroom.html")
    else:
        return redirect(url_for("sign_in"))

而不是将用户重定向到 /登录

编辑:

firebase.auth().signOut().then(() => {
    firebase.auth().onAuthStateChanged((user) => {
        if (user) {
          console.log('still signed in');
        } else {
          console.log('signed out');
        }
      });
    }, (error) => {
      console.error('Sign Out Error', error);
    });

It输出 signed out