Interlaken
API referenceIdentity and accessOAuth 2.1

Revoke a token

POST
/oauth/revoke

RFC 7009 revocation. Revoking a refresh token also revokes the access tokens issued from it. The endpoint always answers 200, whether or not the token existed, so a caller cannot use it to probe for valid tokens.

Request Body

application/x-www-form-urlencoded

TypeScript Definitions

Use the request body type in TypeScript.

Response Body

curl -X POST "https://example.com/oauth/revoke" \  -H "Content-Type: application/x-www-form-urlencoded" \  -d 'token=string'
Empty