Token base data is stored after both access and refresh token are removed

[hotab]

For example, when we use a refresh token, it gets regenerated along with access token. At this point both access and refresh token are no longer present (no references to base data are left), but it is still retained for the next 7 days (default TTL).

This is true at least for redis store.

[LyricTian]

Yes, this problem does exist now, I will try to fix it.