Skip to main content
POST
Revokes a Refresh Token, invalidating it immediately. Typically called when the user logs out.

Header parameters

Content-Type
string
required
Must be application/x-www-form-urlencoded.
Authorization
string
required
Client credentials encoded in Base64: Basic base64({CLIENT_ID}:{CLIENT_SECRET}).

Body parameters

token
string
required
The Refresh Token to revoke.
token_type_hint
string
Token type hint. Fixed value refresh_token.

Response

Returns 200 OK on success. No response body.