we can't invalidate the token if there isn't a user session active

[jvillafanez]

Description

Related Issue

#36149

Motivation and Context

How Has This Been Tested?

• test environment:
• test case 1:
• test case 2:
• ...

Screenshots (if appropriate):

Types of changes

• Bug fix (non-breaking change which fixes an issue)
• New feature (non-breaking change which adds functionality)
• Database schema changes (next release will require increase of minor version instead of patch)
• Breaking change (fix or feature that would cause existing functionality to change)
• Technical debt
• Tests only (no source changes)

Checklist:

• Code changes
• Unit tests added
• Acceptance tests added
• Documentation ticket raised:

Open tasks:

• Backport (if applicable set "backport-request" label and remove when the backport was done)

[codecov]

Codecov Report

Merging #36153 into master will not change coverage.
The diff coverage is n/a.

@@           Coverage Diff           @@
##           master   #36153   +/-   ##
=======================================
  Coverage   54.01%   54.01%           
=======================================
  Files          63       63           
  Lines        7404     7404           
  Branches     1309     1309           
=======================================
  Hits         3999     3999           
  Misses       3019     3019           
  Partials      386      386

Flag	Coverage Δ
#javascript	54.01% <ø> (ø)	⬆️

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ececf51...26a1f2f. Read the comment docs.

[phil-davis]

Tested manually. Fixes the issue.

[phil-davis]

@micbar @PVince81 IMO this issue was introduced by a PR since 10.2.1 so there has not been any release with this problem. So we do not need to add this issue/PR to the changelog.