ORory
oAuth2

Revoke OAuth 2.0 Consent Sessions of a Subject

Changed on

This endpoint revokes a subject's granted consent sessions and invalidates all associated OAuth 2.0 Access Tokens. You may also only revoke sessions for a specific OAuth 2.0 Client ID.

delete/admin/oauth2/auth/sessions/consent

Request

  • Base URL
    / (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /admin/oauth2/auth/sessions/consent
  • Auth
    none declared

Query parameters

subjectstring

OAuth 2.0 Consent Subject

The subject whose consent sessions should be deleted.

clientstring

OAuth 2.0 Client ID

If set, deletes only those consent sessions that have been granted to the specified OAuth 2.0 Client ID.

consent_request_idstring

Consent Request ID

If set, revoke all token chains derived from this particular consent request ID.

allboolean

Revoke All Consent Sessions

If set to true deletes all consent sessions by the Subject that have been granted.

Response

Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is typically 204.

Changes

  • d42439ca4d90Revision changes
    • warning

      deleted the query request parameter consent_challenge_id

    • info

      added the new optional query request parameter consent_request_id

  • 504aaddc7c70Revision changes
    • info

      added the new optional query request parameter consent_challenge_id

    • info

      the query request parameter subject became optional