Authorization

Revoke Token Rfc7009 Compliant

Revoke an access token according to RFC 7009 OAuth Token Revocation.

This endpoint accepts form-encoded data and follows the OAuth 2.0 Token Revocation specification. The client must authenticate using HTTP Basic authentication with their client credentials.

Authentication is performed via the Authorization header with the format: Authorization: Basic base64(client_id:client_secret)

post/api/v1/revoke

Request body

tokenstring required

The token to be revoked (access token).

token_type_hintstring nullable

A hint about the type of the token being revoked (optional). Expected value: 'access_token'

Example request

{
  "token": "0123456789abcdef0123456789abcdef01234567",
  "token_type_hint": "access_token"
}

Response

Successful Response

{"stackTrail":"paths:/api/v1/revoke:post:responses:200:content:application/json:schema","oasType":"schema","type":"unknown"}

Changes

No recorded changes to this endpoint across all 10 revisions of this API.