Does creating an auth code invalidate old access_tokens?

Yes, if a user reauthorizes an application it will invalidate old access tokens. This has been the case for a long time.