answering my own question: here is a statement from an auth0 person confirming that login tokens are impossible to revoke:
Is there any way to expire or revoke bearer access token on logout event of dot net core application
Related topics
| Topic | Replies | Views | Activity | |
|---|---|---|---|---|
| Does Auth0 prevent the user to be logged in at two different places? | 10 | 5800 | May 25, 2019 | |
| Having Trouble on Remove Auth0 Session When Logout From Front End | 3 | 5339 | October 11, 2019 | |
| Ability to revoke access token at logout | 6 | 5826 | September 8, 2021 | |
| Expire access token when Logout | 3 | 8062 | July 19, 2024 | |
| Revoking Access Tokens | 4 | 3927 | April 17, 2020 |