Distinguishing between an expired token and invalidated Token
-
Hi,
I was wondering is it possible on a token refresh to determine if a user has been deleted?
The scenario I was thinking of is if a user was actively logged in and getting valid token refreshes, but then their account has been deleted – can the token validation or endpoint refresh endpoint detect this (i.e distinguish between an expired token and a deleted user?)
Thanks!
- You must be logged in to reply to this topic.