Revoking Tokens

[Chuil]

Hi,

When revoking an Access Token, is the related Refresh Token also automatically revoked ?

(This is what I note)

Thanks,

Charles

[JohnFitbit]

Hi @Chuil,

That's correct. 

"Revoking the access token or refresh token will provide the same result. When the token is revoked, all tokens are revoked for that user. If an application has multiple sessions (web, mobile, etc.) for the same user, the revocation will remove all sessions (web, mobile, etc.) associated with that user."

Documentation: https://dev.fitbit.com/build/reference/web-api/oauth2/#revoking-tokens

I hope this helps. Let me know if you have any additional questions.