Do I need to keep expired tokens in the database?

[ianmiddelkamp]

Hello I followed the cookbook at https://bshaffer.github.io/oauth2-server-php-docs/cookbook/ my oauth controller adds ClientCredentials GrantType and AuthorizationCode grantypes.

Do i need to keep old expired tokens in the database or can the 'oauth_access_tokens' table be cleaned out?

[bzp2010]

I think you can delete expired access_token. Of course, if it's not in a critical service, you can empty the data table. BTW, refresh_token should be cleared too.