#dev 2021-09-18

2021-09-18 UTC

aaronpk i would say it makes sense to revoke the access token immediately too. since only one client should be using the access token, if that client uses the refresh token then it should never be using the previous access token again