---
title: "Revoke a Token"
method: POST
path: "/oauth/v2/revoke"
tags: ["OAuth 2.0"]
---

# Revoke a Token

`POST /oauth/v2/revoke`

## Request

- Base URL: `https://api.proof.com`
- URL: `https://api.proof.com/oauth/v2/revoke`
- Auth: none declared

Revokes an [access token](https://datatracker.ietf.org/doc/html/rfc6749#section-1.4) or [refresh token](https://datatracker.ietf.org/doc/html/rfc6749#section-1.5) issued to the authenticated client, per [RFC 7009](https://datatracker.ietf.org/doc/html/rfc7009). Client authentication uses [`client_secret_post`](https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1), [`client_secret_basic`](https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1) or [`private_key_jwt`](https://datatracker.ietf.org/doc/html/rfc7523#section-2.2). Responds 200 for a revoked token and for an unknown token.

## Request body `application/x-www-form-urlencoded`

- RevocationRequest
  - `token` string, required: The access token or refresh token to revoke, issued to the authenticated client.
  - `token_type_hint` 'access_token' | 'refresh_token': A [`token_type_hint`](https://datatracker.ietf.org/doc/html/rfc7009#section-2.1) for the submitted token.
  - `client_id` string: Your [`client_id`](https://datatracker.ietf.org/doc/html/rfc6749#section-2.2).
  - `client_secret` string: Your client secret, for [`client_secret_post`](https://datatracker.ietf.org/doc/html/rfc6749#section-2.3.1) client authentication.
  - `client_assertion_type` 'urn:ietf:params:oauth:client-assertion-type:jwt-bearer': Set to `urn:ietf:params:oauth:client-assertion-type:jwt-bearer` for [`private_key_jwt`](https://datatracker.ietf.org/doc/html/rfc7523#section-2.2) client authentication.
  - `client_assertion` string: A JWT signed with one of your registered keys, for [`private_key_jwt`](https://datatracker.ietf.org/doc/html/rfc7523#section-2.2) client authentication: `iss` and `sub` are your `client_id`, `aud` is the issuer or the token endpoint URL, with `exp` and a single-use `jti`.

## Response `200`

successful

- RevocationResponse

## Other responses

- `403`: Forbidden

---

[API](https://skmtc.dev/proof/apis/oauth-2-0-api-specification.md) - [All operations](https://skmtc.dev/proof/apis/oauth-2-0-api-specification/llms.txt) - [OpenAPI document](https://skmtc.dev/proof/apis/oauth-2-0-api-specification/revisions/7e769f9c96ed?raw)