The access token is still working even after successful execution of Oauth policy(operation "InvalidateToken"). The access token that goes under the OAuth policy is still authorizing the API calls, infact it should get revoked.
One more scenario I came across where in I tried 5 iterations of generating access token, 4 out of 5 access token were generated with the help of a refresh token call. So what I observed is 4 out 5 random access token successfully got revoked but one didnt.
Please help me resolve this issue.
LinkedIn
Twitter
