OAuth
OAuth 2.0 Token Revocation (RFC 7009)
Revokes an access token or refresh token. Body MUST be application/x-www-form-urlencoded. Per RFC 7009 §2.2, the response is 200 OK whether the token was successfully revoked, already revoked, expired, or unknown — this prevents leaking information about token validity. Revoking a refresh token cascades to the entire token family (all access + refresh tokens issued from the same grant). Revoking an access token does NOT cascade.
post/oauth/revoke
Request
- Base URL: https://app.buildworkpro.com/api/v1
- URL: https://app.buildworkpro.com/api/v1/oauth/revoke
- Auth: none required
Response
Token revoked, already revoked, expired, or unknown — all return 200 per RFC 7009 §2.2
Changes
No recorded changes to this operation across all 1 revision of this API.