Revoke tokens
Revoke an access token or refresh token. Once revoked, the token can no longer be used.
Revoking a refresh token revokes all access tokens that were created using the same authorization.
This endpoint can only be accessed using OAuth client credentials.
Headers
The OAuth client ID and client secret as basic access credentials.
Pseudo code: "Basic " + toBase64(client_id + ":" + client_secret)
For example: Basic QWxhZGRpbjpvcGVuIHNlc2FtZQ==
This header value must match the type of the request body you send, if there is a request body. For example, if you send the request body as JSON, this header must be set to application/json, and if you send it as form encoded you must set this header to application/x-www-form-urlencoded.
A unique key to ensure idempotent requests. This key should be a UUID v4 string.
Request body
Example request
{
"token_type_hint": "access_token",
"token": "access_..."
}Response
An empty response.