It is possible to invalidate refresh tokens in order to manage OAuth client access more robustly.
Was this page helpful?