It seems that tokens created with no_expiry scope are immune to requests to invalidate them with /access-tokens/.../invalidate. Is this by design or by bug?

1 Answer 1


This should be fixed now.

Invalidation should be possible for any access token, regardless of its properties.


You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .