symfony - Shouldn't the old access token be invalidated by a refresh call? -


when refresh oauth access token a, new access token b. a still valid, can still use it.

shouldn't old access token invalidated refresh operation? if not, if it's "by design", give me details why?

note: using symfony fosoauthserverbundle bundle.

the rfc6749 section 1.5 indicates that:

refresh tokens issued client authorization server , used obtain [...] additional access tokens identical or narrower scope

as far understand, access token a may still valid when access token b issued refreh token.


Comments

Popular posts from this blog

android - net_scheduler holding wakelock -

sql - MySQL : Getting Entries from a many-to-many table -

java - Retrieving data from database using jsp (Hibernate + Spring + Maven) -