It seems that tokens created with no_expiry scope are immune to requests to invalidate them with /access-tokens/.../invalidate. Is this by design or by bug?
Does /invalidate work for no-expiry tokens?
Greg Hewgill
- 3.9k
- 2
- 18
- 17