OAuth2

Revoke an access token or refresh token

Changed on

Revoke an access token or refresh token.

post/oauth2/revoke

Request

Request body application/x-www-form-urlencoded

client_idstring required
client_secretstring required
tokenstring required
token_type_hintstring

Defaults to 'access_token' but can be 'refresh_token' to revoke a refresh token.

Response

OK

successboolean

Changes

    • breaking

      request body became required

    • breaking

      removed the media type application/json from the request body

    • breaking

      the response's property type changed from string to boolean for status

    • info

      api operation id post_oauth2_revoke removed and replaced with postOauth2Revoke

    • info

      added the new optional header request parameter XF-Api-User to all path's operations

    • info

      added the new optional query request parameter api_bypass_permissions to all path's operations

    • info

      api tag OAuth2 added

    • info

      api tag oauth2 removed

    • info

      added the media type application/json for the response with the status