MB-R253

HUMAN VERIFICATION REQUIRED ASVS 10.4.9 Token revocation (when oauth_oidc is used)

MB-C16 ASVS Level 2 Contextual Human Assurance High

Refresh tokens and reference access tokens can be revoked by an authorized user using the authorization server user interface, to mitigate the risk of malicious clients or stolen tokens.