# How to Invalidate Tokens on User Inactivity Without Issuing a New One?

**URL:** <https://forums.losant.com/t/how-to-invalidate-tokens-on-user-inactivity-without-issuing-a-new-one/5871>\
**Category:** Help\
**Tags:** experience\
**Created:** [June 23, 2025, 11:20am UTC](https://forums.losant.com/t/how-to-invalidate-tokens-on-user-inactivity-without-issuing-a-new-one/5871 "2025-06-23T11:20:02Z")\
**Posts on this page:** 3\
**Page:** 1

<div class="post-metadata">

**Author:** ![Jayanth\_Guntuku](https://avatars.discourse-cdn.com/v4/letter/j/9f8e36/32.png) [@Jayanth\_Guntuku](https://forums.losant.com/u/Jayanth_Guntuku)\
**Post date:** [June 23, 2025, 11:20am UTC](https://forums.losant.com/t/how-to-invalidate-tokens-on-user-inactivity-without-issuing-a-new-one/5871/1 "2025-06-23T11:20:02Z")

</div>

Hi Losant team,

I’m working on an authentication flow where a token is issued upon user login and is valid for 24 hours. This part works fine. However, I’m running into a challenge regarding user inactivity.

My Use Case:  
I want to implement a mechanism where, if a user is inactive for a long period (e.g., 8 hours), their token is invalidated - even though it hasn’t technically expired yet. The goal is to force re-authentication based on inactivity, not just total token lifespan.

What I’m Trying to Figure Out:  
Is there a way to explicitly revoke or invalidate a previously issued token without generating a new one?

---

<div class="post-metadata">

**Author:** ![Dylan\_Schuster](https://sea1.discourse-cdn.com/flex015/user_avatar/forums.losant.com/dylan_schuster/32/2850_2.png) [@Dylan\_Schuster](https://forums.losant.com/u/Dylan_Schuster)\
**Post date:** [June 23, 2025, 12:30pm UTC](https://forums.losant.com/t/how-to-invalidate-tokens-on-user-inactivity-without-issuing-a-new-one/5871/2 "2025-06-23T12:30:10Z")

</div>

Hi @Jayanth_Guntuku, and welcome to the Losant Forums! To answer your question …

> Is there a way to explicitly revoke or invalidate a previously issued token without generating a new one?

There is - using the [User: Update Node](https://docs.losant.com/workflows/experience/update-user/) and checking the “Invalidate tokens” option.

As for your use case of expiring tokens for idle users, there are a number of ways you could accomplish that, but it sounds like you have an idea of how to approach that already. Let us know if you have any other questions!

---

<div class="post-metadata">

**Author:** ![Jayanth\_Guntuku](https://avatars.discourse-cdn.com/v4/letter/j/9f8e36/32.png) [@Jayanth\_Guntuku](https://forums.losant.com/u/Jayanth_Guntuku)\
**Post date:** [June 23, 2025, 5:57pm UTC](https://forums.losant.com/t/how-to-invalidate-tokens-on-user-inactivity-without-issuing-a-new-one/5871/3 "2025-06-23T17:57:41Z")

</div>

Thank You @Dylan_Schuster. It worked 🙂