Refresh Token Exchange - fertft Events "Token could not be decoded or is missing in DB"

Knowledge Articles
, ,
1

Overview

This article explains the cause of fertft events with the description:

Token could not be decoded or is missing in DB

Applies To

  • fertft events
  • Refresh Token Exchange

Cause

  • The Refresh token family was previously invalidated due to re-use.
  • The limit of 200 refresh tokens per user per application has been reached, and the token in question has been pruned.

Solution

If an application attempts to re-use a rotating refresh token, the refresh token family is invalidated, and the error Reused rotating refresh token detected, revoked the family is displayed.

The token is then deleted from the Auth0 database. Any subsequent use of the same token will result in the Token could not be decoded or is missing in DB error message.

This error can also occur if refresh token limits are exceeded and the token in question has been pruned as a result.