Auth0 has three session layers, four refresh token variants, DPoP, back-channel logout, a Session Management API, and Actions that can override all of it at runtime.
Every option explained with pros/cons and when to combine them.
https://tobytes.com/articles/auth0-session-token-management-options-explained

Auth0 Session and Token Management: Every Option Explained
Auth0 gives you a lot of knobs to turn when it comes to sessions and tokens — enough that the choices start to blur together. This post maps out every option, what it does, when you'd reach for it, and how they work together for different application types.