We are using Spring Security OAuth2 service. We maintain a blacklist of refresh tokens in memory. Whenever the Authorization server gets a request with the refresh token (to renew the user token), we want to validate against this blacklist.
What is the Spring call back method where I can make this check? We have looked at JDBCApprovalStore, but are looking for a more simpler solution only for invalidation of refresh tokens.