When a Refresh Token Becomes Unusable

Overview

This article clarifies in which scenarios a Refresh Token will become unusable.

Applies To

  • Refresh Token

Solution

There are two main scenarios where a Refresh Token becomes unusable:

  1. When a new Refresh Token is issued. The previously issued ones are invalidated and can no longer be used.
  2. When a Refresh Token is revoked. It is invalidated and can no longer be used. Revoke can be performed using the Dashboard, Authentication API, and Management API.

Related References