curl --request POST \
--url 'https://oauth.msu.io/oauth/revoke' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Authorization: Basic base64({CLIENT_ID}:{CLIENT_SECRET})' \
--data 'token={REFRESH_TOKEN}&token_type_hint=refresh_token'
const response = await fetch('https://oauth.msu.io/oauth/revoke', {
method: 'POST',
headers: {
'Content-Type': 'application/x-www-form-urlencoded',
'Authorization': `Basic ${btoa('{CLIENT_ID}:{CLIENT_SECRET}')}`
},
body: new URLSearchParams({
token: '{REFRESH_TOKEN}',
token_type_hint: 'refresh_token'
})
});
import requests
import base64
credentials = base64.b64encode(b'{CLIENT_ID}:{CLIENT_SECRET}').decode()
response = requests.post(
'https://oauth.msu.io/oauth/revoke',
headers={
'Content-Type': 'application/x-www-form-urlencoded',
'Authorization': f'Basic {credentials}'
},
data={
'token': '{REFRESH_TOKEN}',
'token_type_hint': 'refresh_token'
}
)
HTTP/1.1 200 OK
Oauth
Token Revocation
Revoke a Refresh Token. Typically called on user logout.
POST
/
oauth
/
revoke
curl --request POST \
--url 'https://oauth.msu.io/oauth/revoke' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Authorization: Basic base64({CLIENT_ID}:{CLIENT_SECRET})' \
--data 'token={REFRESH_TOKEN}&token_type_hint=refresh_token'
const response = await fetch('https://oauth.msu.io/oauth/revoke', {
method: 'POST',
headers: {
'Content-Type': 'application/x-www-form-urlencoded',
'Authorization': `Basic ${btoa('{CLIENT_ID}:{CLIENT_SECRET}')}`
},
body: new URLSearchParams({
token: '{REFRESH_TOKEN}',
token_type_hint: 'refresh_token'
})
});
import requests
import base64
credentials = base64.b64encode(b'{CLIENT_ID}:{CLIENT_SECRET}').decode()
response = requests.post(
'https://oauth.msu.io/oauth/revoke',
headers={
'Content-Type': 'application/x-www-form-urlencoded',
'Authorization': f'Basic {credentials}'
},
data={
'token': '{REFRESH_TOKEN}',
'token_type_hint': 'refresh_token'
}
)
HTTP/1.1 200 OK
Revokes a Refresh Token, invalidating it immediately. Typically called when the user logs out.
Header parameters
string
required
Must be
application/x-www-form-urlencoded.string
required
Client credentials encoded in Base64:
Basic base64({CLIENT_ID}:{CLIENT_SECRET}).Body parameters
string
required
The Refresh Token to revoke.
string
Token type hint. Fixed value
refresh_token.Response
Returns200 OK on success. No response body.
curl --request POST \
--url 'https://oauth.msu.io/oauth/revoke' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--header 'Authorization: Basic base64({CLIENT_ID}:{CLIENT_SECRET})' \
--data 'token={REFRESH_TOKEN}&token_type_hint=refresh_token'
const response = await fetch('https://oauth.msu.io/oauth/revoke', {
method: 'POST',
headers: {
'Content-Type': 'application/x-www-form-urlencoded',
'Authorization': `Basic ${btoa('{CLIENT_ID}:{CLIENT_SECRET}')}`
},
body: new URLSearchParams({
token: '{REFRESH_TOKEN}',
token_type_hint: 'refresh_token'
})
});
import requests
import base64
credentials = base64.b64encode(b'{CLIENT_ID}:{CLIENT_SECRET}').decode()
response = requests.post(
'https://oauth.msu.io/oauth/revoke',
headers={
'Content-Type': 'application/x-www-form-urlencoded',
'Authorization': f'Basic {credentials}'
},
data={
'token': '{REFRESH_TOKEN}',
'token_type_hint': 'refresh_token'
}
)
HTTP/1.1 200 OK