I\'m build APIs which utilize access token and refresh token.
When refreshing access token, old(or expired) access token can be revoked explicitly. But to do so,