refresh_token_revocation_workaround.md

Multiple refresh_tokens with same subject and client_id not getting revoked problem

IdentityServer4 Issue

Project

The Workaround

Usage

public void ConfigureServices(IServiceCollection services)
{
   ...
   var builder = services.AddIdentityServer();
   ...
   
   // my replacement services added AFTER services.AddIdentityServer();
   builder.AddRefreshTokenRevokationGeneratorWorkAround();
   services.AddRefreshTokenRevokationGeneratorWorkAroundTypes();         

   ...
}