RevocationScope Enum
The principal a revocation cutoff is recorded against.
public enum RevocationScopeFields
Subject 0
Every token issued to one end user, across all of their sessions. What an account suspension, a password change or a "sign out everywhere" acts on.
Session 1
Every token issued within one session, leaving the same user's other sessions alone. What a logout from a single device acts on.
Remarks
A cutoff is a single write that invalidates every token issued before a moment, so the scope decides how wide that reaches. The two are stored apart because a subject identifier and a session identifier can collide as strings, and a collision would revoke the wrong principal.