OAuth2 Token Handling - How to Relate Session Tokens to a User

Hi all,

New here but thanks to other posts I was able to get a OAuth2 Server Action working. I am using Session based Token Handling at the moment which is working great refreshing tokens automatically.

One thing I had no idea about is how to relate the ‘Session’ to a user. I couldn’t find any info on that so is anyone able to provide some detail? Basically I want to ensure that the session access token relates only the user who authorized it.

On similar note, depending on the response to the above, I wanted to ensure the access token is available if the user signed in anywhere (eg. another browser, computer, etc)? Is this possible or do I need to Self Maintain the access tokens to do that.

Thanks!