PGpgedge
OAuth

Revoke a token

Changed on

Implements RFC 7009 token revocation. Always responds 200, whether or not the token existed, so as not to leak which tokens are valid. Revoking a refresh token also revokes the access token issued alongside it. No authentication is required.

post/oauth/revoke

Request

  • The document declares no server URL.
  • Auth
    none declared

Request body application/x-www-form-urlencoded

tokenstring required

Response

The token was revoked, or did not exist.

Changes