OAuth
Revoke a token
RFC 7009. Revoking an access token kills that token; revoking a refresh token revokes the whole grant (status revoked). Always 200, also for unknown tokens.
Error codes: parameter_invalid, parameter_missing, rate_limited.
POST
Revoke a token
Authorizations
Bearer authentication header of the form Bearer <token>, where <token> is your auth token.
Headers
Optional client correlation id, up to 128 characters. It is not echoed: the response's X-Request-Id is always
our own req_… id. We log your value with the request as client_request_id, so support can find a request by
either id. A longer value is refused with 400 parameter_invalid.
Maximum string length:
128Body
application/x-www-form-urlencoded
Response
Revoked (or unknown).