By using AWS re:Post, you agree to the AWS re:Post Terms of Use
AWS re:Postre:Post

Cognito Revoke Token

0

RevokeToken API introduced in June 2021, I have a business problem. RevokeToken Expiration Time : 30 Days AccessToken Expiration Time : 30 Minutes If i logging into two devices with same user with some delay and generate AccessToken and RefreshToken, Firsly generated RefreshToken will be revoked automatically when the user logging the same credential in the second device. But the lastly generated accessToken from first refreshtoken will be in live for that 30 mins when that refresh token is invalid or revoked. How to invalidate that accessToken? please suggest a solution for it?

Topics
Security, Identity, & ComplianceMicroservicesAWS Well-Architected Framework
Tags
Amazon CognitoMicroservicesSecurity
Language
English
Prem
asked 3 years ago712 views
1 Answer
1

See the documentation here: https://docs.aws.amazon.com/cognito/latest/developerguide/token-revocation.html

profile pictureAWS
Rodney Lester
answered 3 years ago

You are not logged in. Log in to post an answer.

A good answer clearly answers the question and provides constructive feedback and encourages professional growth in the question asker.

Guidelines for Answering Questions

Relevant content