public async Task ReceiveAsync(AuthenticationTokenReceiveContext context) { //var allowedOrigin = context.OwinContext.Get<string>("as:clientAllowedOrigin"); //context.OwinContext.Response.Headers.Add("Access-Control-Allow-Origin", new[] { allowedOrigin }); using (var repo = new SecurityDbContext()) { var refreshToken = await repo.FindRefreshTokenAsync(context.Token); if (refreshToken != null) { //Get protectedTicket from refreshToken class context.DeserializeTicket(refreshToken.ProtectedTicket); var result = await repo.RemoveRefreshToken(context.Token); } } }