Hacker News new | ask | show | jobs
by raxxorrax 2323 days ago
From experience I would say that most services do not invalidate access tokes after any account modifications, since you would need to track them. Depending on the service that might not be too trivial, but I would expect services like Instagram to do so. It is becoming more common at least.
1 comments

Timestamping the tokens and invrementing timestamp at reset & compare these tses on reset is one way to do it