COcoder
Enterprise

Revoke OAuth2 tokens (RFC 7009).

Changed on
post/oauth2/revoke

Request

  • Base URL
    / (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /oauth2/revoke
  • Auth
    none declared

Headers

Authorizationstring

HTTP Basic credentials, the client_id as the username and the client_secret as the password. A confidential client sends these or the form fields below, not both.

Request body application/x-www-form-urlencoded

client_idstring

Client ID, required unless sent as the HTTP Basic username

client_secretstring

Client secret, required for a confidential client unless sent as the HTTP Basic password. Public clients (token_endpoint_auth_method=none) send no secret.

tokenstring required

The token to revoke

token_type_hintstring

Hint about token type (access_token or refresh_token)

Response

Token successfully revoked. A 200 does not confirm that the token existed or belonged to the client

Changes

  • 02a0718e620eRevision changes
    • info

      added the non-success response with the status

  • f0b7098d4980Revision changes
    • info

      added the new optional header request parameter Authorization

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status