# \#refresh-token-revocation

**URL:** https://community.auth0.com/tag/refresh-token-revocation/2095.md

[Latest](https://community.auth0.com/latest.md) · [Categories](https://community.auth0.com/categories.md) · [Tags](https://community.auth0.com/tags.md)

---

## [iOS Auth0 credentialsManager.canRenew() Returning False Unexpectedly](https://community.auth0.com/t/ios-auth0-credentialsmanager-canrenew-returning-false-unexpectedly/181898)

<div class="topic-metadata">

**Author:** [@tim.bradford](https://community.auth0.com/u/tim.bradford)\
**Replies:** 1\
**Last updated:** [February 12, 2025, 12:02am UTC](https://community.auth0.com/t/ios-auth0-credentialsmanager-canrenew-returning-false-unexpectedly/181898 "2025-02-12T00:02:43Z")

</div>

We’re using Auth0 in our iOS app and have encountered an issue where credentialsManager.canRenew() returns false for most users. Context: We do not have rotating refresh tokens enabled. Our refresh tokens are set to ne…

---

## [Is it possible to revoke refresh token when user changes password in Azure AD?](https://community.auth0.com/t/is-it-possible-to-revoke-refresh-token-when-user-changes-password-in-azure-ad/137440)

<div class="topic-metadata">

**Author:** [@adam.bate](https://community.auth0.com/u/adam.bate)\
**Replies:** 1\
**Last updated:** [June 27, 2024, 12:21am UTC](https://community.auth0.com/t/is-it-possible-to-revoke-refresh-token-when-user-changes-password-in-azure-ad/137440 "2024-06-27T00:21:11Z")

</div>

We have a requirement to logout the user when they change their password in Microsoft AD. I know the best I can do is revoke the token. My question is, does Auth0 even know if this occurs and are there any actions tha…

---

## [Restrict multiple logins for a user in SPA application](https://community.auth0.com/t/restrict-multiple-logins-for-a-user-in-spa-application/122111)

<div class="topic-metadata">

**Author:** [@m.sadikot](https://community.auth0.com/u/m.sadikot)\
**Replies:** 3\
**Last updated:** [December 5, 2023, 5:59pm UTC](https://community.auth0.com/t/restrict-multiple-logins-for-a-user-in-spa-application/122111 "2023-12-05T17:59:02Z")

</div>

Hi team, We have a SPA application that runs on a subscription based model. For this, we want to have a feature where users can only have 2 concurrent active sessions. Is there a way to achieve this? I looked into some …

---

## [How can social user invalidate all sessions?](https://community.auth0.com/t/how-can-social-user-invalidate-all-sessions/111218)

<div class="topic-metadata">

**Author:** [@piotr.jablonski](https://community.auth0.com/u/piotr.jablonski)\
**Replies:** 3\
**Last updated:** [January 31, 2025, 5:47pm UTC](https://community.auth0.com/t/how-can-social-user-invalidate-all-sessions/111218 "2025-01-31T17:47:31Z")

</div>

Let’s assume some user logs in to any web application (let’s say, https://manage.auth0.com/) using Auth0 via Google-oauth2 and then loses his device he used to log in. He immidiatelly accesses his Google account from an…

---

## [Destroy/Revoke all active sessions after password reset](https://community.auth0.com/t/destroy-revoke-all-active-sessions-after-password-reset/95077)

<div class="topic-metadata">

**Author:** [@tsanderson](https://community.auth0.com/u/tsanderson)\
**Replies:** 4\
**Last updated:** [October 31, 2024, 8:01pm UTC](https://community.auth0.com/t/destroy-revoke-all-active-sessions-after-password-reset/95077 "2024-10-31T20:01:31Z")

</div>

Hi, Is there a way to revoke / destroy all active sessions after a user has reset their password? The issue we face is… Suppose user’s password has been compromised somehow, and the attacker has logged in to user’s ac…