Revoke Refresh Token

Revoke a refresh token.

Use this endpoint to invalidate a refresh token, for example when logging out or when a token is compromised. This follows the OAuth 2.0 Token Revocation specification (RFC 7009) which uses POST.

Args: payload: Request containing the refresh token to revoke db: Database session

Raises: 404: If the refresh token is not found