$refreshTokenEntity->getIdentifier(), 'access_token_id' => $refreshTokenEntity->getAccessToken()->getIdentifier(), 'revoked' => 0, 'expires_at' => $refreshTokenEntity->getExpiryDateTime()->getTimestamp(), ]); // TODO: Logging and metrics } /** * Revoke the refresh token. * * @param string $tokenId */ public function revokeRefreshToken($tokenId): void { $refreshToken = RefreshToken::find($tokenId); if ($refreshToken) { $refreshToken->revoke(); } } /** * Check if the refresh token has been revoked. * * @param string $tokenId * * @return bool Return true if this token has been revoked */ public function isRefreshTokenRevoked($tokenId): bool { $refreshToken = RefreshToken::find($tokenId); return $refreshToken ? $refreshToken->isRevoked() : true; } }