v1

latestOpenAPI 3.0.0Apache 2.0 License2026-07-14101465558.4 KB

Revokes all of the access tokens generated by, and at the same time as, the specified refresh token. After a token is revoked, you can't use the revoked token to access Amazon Cognito user APIs, or to authorize access to your resource server.

post/#X-Amz-Target=AWSCognitoIdentityProviderService.RevokeToken

Headers

X-Amz-Target'AWSCognitoIdentityProviderService.RevokeToken' required

Request body

Tokenstring password required

The refresh token that you want to revoke.

ClientIdstring password required

The client ID for the token that you want to revoke.

ClientSecretstring password

The secret for the client ID. This is required only if the client ID has a secret.

Response

Success

RevokeTokenResponse required