When a user revokes the access of the OAuth app, Auth0 is not aware of it and keeps using its cached personal access token. When logging out on BE side, we need to make sure to clear as well the cache that holds the authorized scopes of a given token.
When a user revokes the access of the OAuth app, Auth0 is not aware of it and keeps using its cached personal access token. When logging out on BE side, we need to make sure to clear as well the cache that holds the authorized scopes of a given token.