BUG#AC-9337:Revoking or invalidating previous access tokens upon generating new access token

Author: Rachana

app/code/Magento/Integration/Model/CustomerTokenService.php

@@ -58,6 +58,7 @@ public function createCustomerAccessToken($username, $password)
         $this->getRequestThrottler()->throttle($username, RequestThrottler::USER_TYPE_CUSTOMER);
         try {
             $customerDataObject = $this->accountManagement->authenticate($username, $password);
+            $this->revokeCustomerAccessToken($customerDataObject->getId());
         } catch (EmailNotConfirmedException $exception) {
             $this->getRequestThrottler()->logAuthenticationFailure($username, RequestThrottler::USER_TYPE_CUSTOMER);
             throw $exception;

app/code/Magento/JwtUserToken/Model/Revoker.php

@@ -36,7 +36,7 @@ public function revokeFor(UserContextInterface $userContext): void
     {
         //Invalidating all tokens issued before current datetime.
         $this->revokedRepo->saveRevoked(
-            new Revoked((int) $userContext->getUserType(), (int) $userContext->getUserId(), time())
+            new Revoked((int) $userContext->getUserType(), (int) $userContext->getUserId(), time()-1)
         );
     }
 }