OAuth

revoke token

Changed on

revoke a single token

post/tyk/oauth/revoke

Request

  • Base URL
    https://localhost:8080
  • URL
    https://localhost:8080/tyk/oauth/revoke
  • Auth
    API key in header X-Tyk-Authorization

Request body application/x-www-form-urlencoded

client_idstring required

id of oauth client

org_idstring
tokenstring required

token to be revoked

token_type_hintstring

type of token to be revoked, if sent then the accepted values are access_token and refresh_token. String value and optional, of not provided then it will attempt to remove access and refresh tokens that matches

Example request

{
  "client_id": "2a06b398c17f46908de3dffcb71ef87df",
  "org_id": "6492f66e6ebbc56c6a6bf022",
  "token": "eyJvcmciOiI1ZTIwOTFjNGQ0YWVmY2U2MGMwNGZiOTIiLCJpZCI6IjIyODQ1NmFjNmJlMjRiMzI5MTIyOTdlODQ5NTc4NjJhIiwiaCI6Im11cm11cjY0In0=",
  "token_type_hint": "access_token"
}

Response

token revoked

messagestring
statusstring

Changes

  • 111affa17abeRevision changes
    • breaking

      the request property became required

    • breaking

      the request property became required

    • info

      added the new optional request property

    • info

      request body became optional

    • info

      added the media type application/json for the response with the status

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

  • 111d8ca21864Revision changes
    • breaking

      request body became required

    • breaking

      removed the media type application/json for the response with the status

    • warning

      removed the request property

    • info

      the request property became optional

    • info

      the request property became optional

    • info

      removed the non-success response with the status

    • info

      removed the non-success response with the status