This message was deleted.

ok, saw a thread where ppl discussing about this and using a token with short TTL, will try this approach. I am assuming we can't revoke the token.

that's correct, once it's issued, a token cannot be revoked

thanks for the confirmation