Skip to main content
POST
Revoke a token

Authorizations

Authorization
string
header
required

Confidential-client authentication at the token/revoke endpoints — HTTP Basic client_id:client_secret (or the equivalent client_secret_post body params). Public (PKCE) clients send only client_id and use no scheme.

Body

application/x-www-form-urlencoded
token
string
required
token_type_hint
enum<string>
Available options:
access_token,
refresh_token

Response

Acknowledged (empty body).

The response is of type object.