Revoke a client access token
Revokes a client access token previously issued via /client_auth_token, preventing it from being used to initialize SDK modules. The platform authenticates to this endpoint with its own HMAC credentials.
This endpoint works independently of the optional Auto-revoke previous token platform setting described on /client_auth_token: a token revoked here stays revoked, and manual revocation remains available whether or not that setting is enabled.
Request
- Base URLhttps://api.cert.zerohash.com
- AuthAPI key in header X-SCX-API-KEY and API key in header X-SCX-PASSPHRASE
Headers
HMAC-SHA256 signature of the request, base64-encoded. See the Authentication guide for the exact signing formula.
Current Unix timestamp in seconds. Must be within 60 seconds of server time or the request is rejected.
Request body
Example request
{
"token": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiIxMjM0NTY3ODkwIiwibmFtZSI6IkpvaG4gRG9lIiwiaWF0IjoxNTE2MjM5MDIyfQ.SflKxwRJSMeKKF2QT4fwpMeJf36POk6yJV_adQssw5c"
}Response
Client access token successfully revoked. Response body is empty.
Changes
No recorded changes to this operation across all 2 revisions of this API.