Isn’t it possible to associate the token to the user and limit it by logic for only one user and recreate it on each sign in? in that case you should be able to store the token on the datadase, sn’t it?
You could also associate it to the session of the user. But then you could have a lot of objects on the session.