Skip to content

OAuth2 Token Revocation (RFC 7009)

POST
/oauth2/revoke

Revoke an access token or refresh token.

Token revocation request parameters (RFC 7009 Section 2.1).

object
token
required
string
token_type_hint
string
nullable
Allowed values: access_token refresh_token
client_id
string
nullable
client_secret
string
nullable

Token successfully revoked (or was already invalid)

OAuth2 error response

object
error
required

OAuth2 error code

string
error_description

Human-readable error description

string