Skip to main content
POST
Revoke a refresh token (RFC 7009)
Revoke a refresh token, making it immediately invalid. Follows RFC 7009.
Returns 200 even if the token is already expired or invalid.

Body

application/json
token
string
required

The refresh token to revoke

client_id
string
required
client_secret
string
required

Response

Token revoked (or already invalid)