Invalidate access token if new scopes are requested.

[openapidev]

Hello,

What is the best way to invalidate an existing access token without knowing its value?

We want to implement incremental authorization flow. If the client requests new scopes we want to invalidate an existing access token using app id and user id and then generate new access token including old and new scopes.

Is it possible without using Management API which provides operation for fetching access token using app id and user id? Can we achieve the same inside proxy itself?

thanks