Cognito - Invalidate access token, when we having multiple access token in a short time

0

We can create an access token and refresh the token using the Cognito user pool (assume the access token timeout is set to 30 Minutes).

Usecase: Generated token two times one after another (T1, T2) as per the Cognito user pool system, both are valid for the next 30 minutes from the created time.

Output: Both tokens are valid for the next 30 minutes.

Expected Behavior: Once T2 is created, T1 must be an invalid token / expired.

Note: You can create T2 from the refresh token or else you can create a new access and refresh token, both having the same result as mentioned above.

How we can manage the tokenization approach in Cognito to overcome this issue? Is there any way or feature in Cognito to achieve this feature?

Prem
已提問 1 年前檢視次數 99 次
沒有答案

您尚未登入。 登入 去張貼答案。

一個好的回答可以清楚地回答問題並提供建設性的意見回饋,同時有助於提問者的專業成長。

回答問題指南