Sign in

v1

latestOpenAPI 3.0.22026-07-14225376.6 KB
Token Revocation API

Revoke Token.

Client applications can revoke a previously obtained refresh or access token when it is no longer needed. This is done by making a request to the token revocation endpoint. DigiLocker will invalidate the specified token and, if applicable, other tokens based on the same authorisation grant. This API may be used to sign out a user from DigiLocker. This API will work for server based web applications, mobile application and limited input devices.

post/oauth2/1/revoke

Request body

tokenstring required

The token that needs to be revoked.

token_type_hint'refresh_token' | 'access_token'

The type of the above token. The value will be one of access_token or refresh_token. If this parameter is not sent, DigiLocker will look for this token in both access and refresh tokens and then revoke it.

Response

successful operation