Unable to invalidate refresh token Azure AD B2C
We use a Python CLI application and we want to invalidate the refresh token after the logout. We have tried to use InvalidateAllRefreshTokens method from the Microsoft Graph API. We get 200 responses instead of 204, as it is stated in the official documentation, but nothing happens, the refresh token is still valid.
In the registration of the B2C application, we gave permission to the User for the Graph API.ReadWriteAll and Directory. ReadWriteAll are we missing something?
Do you have any suggestions for this issue? We want to prevent the user from using the token to access our protected API's after the logout.