Update: Since I was still nagged by this problem, I created a bash one liner to be used with jq that server-side cleans up the refresh tokens for a HA instance:
The proper way to remove a refresh token from the list in the user profile is to actively log out from the device, for which this token was created in the first place. But of course nobody does that and so these refresh tokens become an ever growing list of old & abandoned entries over time, including devices that even may not exist anymore to log out from them the proper way.
Currently there doesn’t seem to be an elegant way in HA to server-side cleanup this list apart from deleting expired en…