title: Access Tokens: Revoke vs Delete
body: <p>I am creating a route <code>/user/logout</code> using <code>dusterio/lumen-passport</code> and in the controller action i manually revoke tokens which leads to the user being logged out.</p>
  
  <p>I have two options to log out a user. Revoke the token (which persists the token in the database - just sets a flag telling that the token is useless) and delete the token.</p>
  
  <p>My question is simply this:</p>
  
  <p><strong>What is the best approach to manage tokens? Should i logout by deleting or by revoking?</strong></p>
  
  <p>In future, i will be using redis to store the tokens so i suppose i should delete the tokens since it doesn't make sense to persist expired data in redis server.</p>