This endpoint is used to revoke an OAuth 2.0 token, which invalidates its associated grant.

Notes:

• You can revoke either using an access_token or a refresh_token.
• Public clients (URL-based client_id) must include their client_id in the request body and can only revoke using token_type_hint=refresh_token.

Example Usage:

Request Body:

{
  "token": "your_refresh_token_here",
  "token_type_hint": "refresh_token"
}

Response:

If the token is successfully revoked:

• HTTP Status: 200 OK (no body content required).

If the token is invalid or has already been revoked:

• HTTP Status: 400 Bad Request.