From Dev.to
How should session revocation affect requests already in flight?
How do you handle session revocation while a request is still in flight? I’m working on a Node.js and PostgreSQL web app and reviewing its access controls before moving a local prototype to Linux host...