10 Credential Revocation

Time to first impact

T+0 to 1s. first impact at 0.2s.

What was injected

Credential Revocation — nothing was injected: this is the worked example

What happened

refresh loop retried on a revoked token until rate-limited

Impact

Remediation

• Re-read a credential when it is refused rather than only at start, and back off on repeated refusals instead of retrying the revoked one.