Hi @thoka, thanks for your reply. I am just checking the flow of how the authentication works from the website.
Regarding the API key, it is an option I can try for developing the API using the Discourse API.
For now, I would like to ask about the invalid access issue with Discourse. Is there any additional information in the database that can be checked (like flag) that indicates a token is already invalid?