Token revocation (RFC 7009)

Revokes an access or refresh token. Accepts application/x-www-form-urlencoded. Idempotent: an unknown token also returns 200 with an empty body.

Authentication

Api-Keystring

API key of the organization. Always sent together with the Secret-Access header.

Headers

Secret-AccessstringRequired

Request

This endpoint expects an object.
tokenstringRequired
token_type_hintenumOptional
An enumeration.
client_idstringOptional
client_secretstringOptional

Response

Token revoked (empty body)

Errors

400
Bad Request Error
422
Unprocessable Entity Error