How does caching (reference token validation) work? I need to invalidate cache when user resets the password. Please help. about identityserver4.accesstokenvalidation HOT 3 CLOSED

It uses whatever IDistributedCache is registered. So use your caching system to do that.

Also - be aware that caching for a longer time - let's say more than 10 seconds is not recommended. Anything else would defeat the purpose of reference tokens.

from identityserver4.accesstokenvalidation.

Thank you, I think If I can get the key, i.e.
var cacheKey = $"{CacheKeyPrefix}{token}".Sha256(); and then
_distributedCache.Remove(cacheKey);
I can invalidate the cache.

from identityserver4.accesstokenvalidation.

this library is deprecated in favour of this superior and more flexible approach:

https://leastprivilege.com/2020/07/06/flexible-access-token-validation-in-asp-net-core/

from identityserver4.accesstokenvalidation.