admin

Flush Expired OAuth2 Access Tokens

This endpoint flushes expired OAuth2 access tokens from the database. You can set a time after which no tokens will be not be touched, in case you want to keep recent tokens for auditing. Refresh tokens can not be flushed as they are deleted automatically when performing the refresh flow.

post/oauth2/flush

Request body

notAfterstring date-time

NotAfter sets after which point tokens should not be flushed. This is useful when you want to keep a history of recently issued tokens for auditing.

Response

Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is typically 201.

Changes