Blacklisting tokens

[James.Morrison]

Can you share the code example that isn’t working in the stated scenario? Upon investigation I found another topic where a community user found success through the below:

access_token'https://example.com/jti'] = '[unique_id_here]';

Set token exp, jti in Client Credentials Exchange Hook

I’d like to be able to adjust the token’s exp in my client_credentials exchange hook. It’s currently determined by the token expiration time in the settings of the API named in the audience of the token request. That’s great, but doesn’t cover two use cases: Lowering the timeout for test clients Raising the timeout beyond the default 30 day limit for customers who demand such To make longer-lived tokens revocable, we’d want to set a jti along with the exp.