Refresh token - log out


#1

First of all I really thanks for your course!
My question is about the refresh token. Why you just don’t remove the refresh token from db but set a flag as revoked?