oauth

Revoke

RFC 7009. Always 200, even for a token that does not exist.

The RFC requires it, and the reason is the same one this codebase applies to signup: distinguishing "revoked" from "never existed" tells a caller which of their guesses was a real credential.

Revokes the grant, not the key — with rotation one consent owns a lineage, and revoking a single key would leave the rest live.

post/revoke

Request

  • Base URL: https://app.zeno-works.ch (the document declares no server; this is the origin it was published from)
  • URL: https://app.zeno-works.ch/revoke
  • Auth: none declared

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.