DeepFrontend
Learning Paths
Practice
System Design & DS
Design Studio
Data Structures Curriculum
Real-World Case Studies
Careers
Job Board
Resume Builder
Blog
Sign in
Search
⌘K
Go Pro
Loading compiler resources...
API Development Quiz Practice
Active Recall Drill Session
← Exit Session
Question 1 of 1
hard
API Development
What does 'family-wide' refresh token revocation mean, and why revoke the WHOLE family rather than just the reused token?
A
It means revoking tokens for every user in the system
B
All refresh tokens tracing back to the same original login share a familyId — revoking the whole family forces BOTH a possible attacker and the legitimate client to re-authenticate, the safe response when it's unclear which party is legitimate
C
Family-wide revocation is a synonym for a single token being revoked
D
This concept doesn't actually appear in the topic
Check Answer