OAuth 2.0 Token Revocation Endpoint

Revokes all active access/refresh tokens and invalidates the OAuth session basing on token provided. The token parameter may be passed in query string or body and may represent access or refresh token.

This endpoint is defined by RFC-7009 "OAuth 2.0 Token Revocation"

For confidential client application types this endpoint requires client authentication using one of the supported methods (client_secret_basic, client_secret_jwt or private_key_jwt)