Comment 24 for bug 1434034

Revision history for this message
Jeremy Stanley (fungi) wrote : Re: Even if the user is disabled, can use the last token is validated

Yes, still deferred invalidation, just via expiration rather than revocation in this regard. It can't be leveraged to gain access to something the user never had access to though, was I think the point of the distinction.