---
title: "Delete Client Tokens"
method: POST
path: "/api/{serviceId}/client/authorization/delete/{clientId}"
tags: ["Client Management"]
---

# Delete Client Tokens

`POST /api/{serviceId}/client/authorization/delete/{clientId}`

Delete all existing access tokens issued to a client application by an end-user.

The subject parameter is required.

## Path parameters

- `serviceId` string, required
- `clientId` string, required

## Request body

- object
  - `subject` string, required — Unique user ID of an end-user.

## Response `200`

- ClientAuthorizationDeleteResponse
  - `resultCode` string — The code which represents the result of the API call.
  - `resultMessage` string — A short message which explains the result of the API call.
  - `serviceApiKey` integer — A short message which explains the result of the API call.
  - `clientId` integer — Get the client ID.
  - `subject` string — Get the subject (= unique identifier) of the user who has granted authorization to the client.
  - `latestGrantedScopes` string[] — Get the scopes granted to the client application by the last authorization process by the user (who is identified by the subject).
  - `mergedGrantedScopes` string[] — Get the scopes granted to the client application by all the past authorization processes. Note that revoked scopes are not included.
  - `modifiedAt` integer — Get the timestamp in milliseconds since Unix epoch at which this record was modified.

## Other responses

- `429` — The request exceeded the request rate permitted for the endpoint.

---

[API](https://skmtc.net/authlete/apis/authlete-api.md) · [All operations](https://skmtc.net/authlete/apis/authlete-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/authlete/authlete-api/versions/7ad74ab64749/schema)