MOmollie
OAuth API

Revoke tokens

Changed on

Revoke an access token or refresh token. Once revoked, the token can no longer be used.

Revoking a refresh token revokes all access tokens that were created using the same authorization.

This endpoint can only be accessed using OAuth client credentials.

delete/oauth2/tokens

Request

  • Base URL
    https://api.mollie.com
  • URL
    https://api.mollie.com/oauth2/tokens
  • Auth
    HTTP basic

Headers

Authorizationstring required

The OAuth client ID and client secret as basic access credentials.

Pseudo code: "Basic " + toBase64(client_id + ":" + client_secret)

For example: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==

Content-Typestring

This header value must match the type of the request body you send, if there is a request body. For example, if you send the request body as JSON, this header must be set to application/json, and if you send it as form encoded you must set this header to application/x-www-form-urlencoded.

idempotency-keystring
Example:123e4567-e89b-12d3-a456-426

A unique key to ensure idempotent requests. This key should be a UUID v4 string.

Request body

token_type_hint'access_token' | 'refresh_token' required
tokenstring required

The token you want to revoke.

Example request

{
  "token_type_hint": "access_token",
  "token": "access_..."
}

Response

An empty response.

Changes