<![CDATA[Validate refresh tokens]]>Hi,

How can I validate a refresh token to see if it is a valid?

]]>https://fusionauth.io/community/forum/topic/2310/validate-refresh-tokensRSS for NodeTue, 21 Jul 2026 13:51:17 GMTThu, 09 Feb 2023 23:05:45 GMT60<![CDATA[Reply to Validate refresh tokens on Thu, 09 Feb 2023 23:36:35 GMT]]>A refresh token is opaque; you cannot validate it yourself.

The general pattern for validating a refresh token is to use it to refresh the JWT, and if the refresh attempt fails, that indicates the refresh token is no longer valid.

You could also retrieve a user’s refresh tokens and compare it to the ones returned by FusionAuth.

More details:

https://fusionauth.io/docs/v1/tech/apis/jwt#refresh-a-jwt
https://fusionauth.io/docs/v1/tech/apis/jwt#retrieve-refresh-tokens

]]>https://fusionauth.io/community/forum/post/5912https://fusionauth.io/community/forum/post/5912Thu, 09 Feb 2023 23:36:35 GMT