---
title: "Access-token revocation — Refresh Tokens for Laravel | Roundly"
description: "Bind an AccessTokenRevoker so every revoked session or family also kills its paired access token, e.g. via a JWT jti denylist."
url: https://roundly-consulting.com/open-source/docs/refresh-tokens-for-laravel/access-token-revoker
language: en
---

[All packages](https://roundly-consulting.com/open-source.md)

[Refresh Tokens for Laravel](https://roundly-consulting.com/open-source/docs/refresh-tokens-for-laravel.md)

# Access-token revocation

By default the package binds a no-op revoker (NullAccessTokenRevoker), so it works standalone. Bind your own adapter to deny access tokens when a session or family is revoked:

```php
use RoundlyConsulting\RefreshTokens\Contracts\AccessTokenRevoker;

$this->app->singleton(AccessTokenRevoker::class, DenylistAccessTokenRevoker::class);

final class DenylistAccessTokenRevoker implements AccessTokenRevoker
{
    public function revoke(#[\SensitiveParameter] string $accessReference): void
    {
        // e.g. add $accessReference to your jwt jti denylist until its TTL expires
    }
}
```

The package calls revoke() with the row’s access\_reference — the value you passed as accessReference on issue or rotation — for every live access reference a revocation kills: logout, revoke-all, session revoke, and the family sweep on reuse detection. php artisan about shows whether a real revoker is BOUND.

## Show your open-source love

This package is free and MIT-licensed. If it saves you time, a one-off donation or a Patreon membership keeps it maintained, tested and documented.

[More ways to support, including crypto](https://roundly-consulting.com/support-us.md)

By donating, you agree to our [donation terms](https://roundly-consulting.com/donation-terms.md).

[Support our open source work (opens in a new tab)](https://donate.stripe.com/dRmeVe8FX5PF1Qd9pXcEw00) [Join us on Patreon (opens in a new tab)](https://www.patreon.com/cw/roundly)

## Want this built into your product?

We integrate our packages into custom Laravel and AI builds. Tell us what you're working on and we'll reply within 48 hours.

[Get a quote in 48 hours](https://roundly-consulting.com/contact.md) [Browse all packages](https://roundly-consulting.com/open-source/docs/refresh-tokens-for-laravel.md)