<![CDATA[Revoking access tokens]]>

<![CDATA[Revoking access tokens]]>Is there a mechanism by which and access_token/id_token can be revoked upon user password change? I'm looking for something similar to how refresh_tokens are revoked when that occurs.

]]>https://fusionauth.io/community/forum/topic/639/revoking-access-tokensRSS for NodeTue, 18 Aug 2026 13:53:20 GMTMon, 07 Dec 2020 20:44:10 GMT60<![CDATA[Reply to Revoking access tokens on Mon, 07 Dec 2020 20:45:09 GMT]]>No, those tokens are completely de-coupled from FusionAuth (in a fundamental way, that is the point of those tokens).

There are revocation strategies however, but they require some additional work.

Here is one strategy we have documented: https://fusionauth.io/learn/expert-advice/tokens/revoking-jwts/

]]>https://fusionauth.io/community/forum/post/1895https://fusionauth.io/community/forum/post/1895Mon, 07 Dec 2020 20:45:09 GMT