We’re announcing that we will be deploying a breaking change to the invalidateRefreshTokens action in the Microsoft Graph beta endpoint starting in March. We expect the breaking change to be fully deployed by the end of March. The following are the updates:
- The invalidateAllRefreshTokens service action is renamed to revokeSignInSessions
- The refreshTokensValidFromDateTime property on the user resource is renamed to signInSessionsValidFromDateTime
This will affect existing applications that are calling invalidateAllRefreshTokens. Â
Current behaviorÂ
RequestÂ
POSTÂ https://graph.microsoft.com/beta/users/{id}/invalidateAllRefreshTokensÂ
ResponseÂ
HTTP/1.1 204 No ContentÂ
New behavior Â
RequestÂ
POSTÂ https://graph.microsoft.com/beta/users/{id}/revokeSignInSessionsÂ
Response Â
HTTP/1.1 204 No ContentÂ
Call to actionÂ
If your app has a dependency on invalidateAllRefreshTokens, update your apps as needed to handle this scenario. We welcome your feedback on UserVoice and if you have further questions reach out to us on StackOverflow.
-The Microsoft Identity Platform Team
