@eng_kendy It depends on how the authentication system is designed.If you’re using pure stateless JWT access tokens, then changing a password usually does not invalidate already-issued tokens automatically.
That’s one of the biggest tradeoffs of stateless auth