v26.4.0

Hydra now ends a remembered login session on the server at the time the login provider requested with remember_for, capped at ttl.authentication_session. Browsers already discarded the session cookie at that time, so sign-in behavior does not change.

Front-channel and back-channel logout notifications are sent only while the login session is valid. A logout for a session older than remember_for completes without notifying clients.