Skip to content
/
Revoke a token

Revoke a token

Request

OAuth 2.0 token revocation (RFC 7009). Revokes an access token or a refresh token; revoking a refresh token revokes its whole token family. The endpoint returns 200 even when the token is already invalid, as required by the RFC.

Bodyapplication/x-www-form-urlencodedrequired
tokenstringrequired

The access or refresh token to revoke.

token_type_hintstring
Enum:"access_token""refresh_token"
client_idstring

OAuth client identifier (public clients).

curl -i -X POST \
  https://developer.alteg.io/_mock/en/b2b-v3/openapi/oauth/revoke \
  -H 'Content-Type: application/x-www-form-urlencoded' \
  -d token=altg_rt_5b8e2d4f68a1c9e0b2d4f68a \
  -d token_type_hint=refresh_token

Responses

The token has been revoked (or was already invalid).

Response
No content