Comment Comment by unscaled Agreed. Revoking all user sessions instead of a specific token is the common case. The only usage I see for revoking a specific token is when the user is deactivating a specific client. parent unscaled 9 years ago