-
Notifications
You must be signed in to change notification settings - Fork 3
Service: OAuth2 Token Revocation
revokes either an access token or a refresh token. When revoking a refresh token, all access tokens associated with the refresh token are also revoked. Client authentication is required for confidential clients.
Available in: full version
Method: POST
Service URL: root/oauth2/revoke
Header Parameters
| Name | Required | Description | Value |
|---|---|---|---|
| Content-Type | yes | content type of the input data | application/x-www-form-urlencoded |
Form Parameters
| Name | Required | Description | Type |
|---|---|---|---|
| client_id | yes | a client id | String |
| client_secret | no, for public clients yes, for confidential clients |
the client secret | String |
| token | yes | an access token or a refresh token | String |
| token_type | no | hint about the token type: access_token or refresh_token | String |
Revoking an access token of a public client
curl -H 'Content-Type: application/x-www-form-urlencoded'
-d 'client_id=io8MvuTN3reflIaESwe5tGd&token=mPUkiQ86cT1YeblMqjr9'
http://localhost:8089/api/v1.0/oauth2/revoke
Revoking a refresh token of a confidential client
curl -H 'Content-Type: application/x-www-form-urlencoded'
-d 'client_id=YMirwQ-beCp5Rxiw4yH&client_secret=nS8cz9Fa5Wl2fbHrM
&token=Q4lxNpch72FUwhO&token_type=refresh_token'
http://localhost:8089/api/v1.0/oauth2/revoke
Hardt, D., Ed., The OAuth 2.0 Authorization Framework, RFC 6749, October 2012. [Online]. Available: https://tools.ietf.org/html/rfc6749
Lodderstedt, T., Ed., and Scurtescu, M., OAuth 2.0 Token Revocation , RFC 7009, August 2013. [Online]. Available: https://tools.ietf.org/html/rfc7009
Parecki, Aaron. OAuth 2.0 Servers. [Online]. Available: https://www.oauth.com/
- Setting LDAP
- Setting initial super client
- Setting a custom environment
- Setting resources for CLARIN FCS
- Disabling query rewrites
- Named virtual corpora
- Importing Kustvakt to Eclipse
- Installing Lombok
- Setting annotation processors
- Setting a test environment
- HTTP Basic Authentication
- OAuth2 authorization scopes
- OAuth2 authorization request
- OAuth2 token request
- OAuth2 token revocation
- OAuth2 client registration
- OAuth2 client info
- OAuth2 client deregistration
- OAuth2 client secret reset
- Plugin registration
- Plugin list (marketplace)
- Plugin installation
- Plugin uninstallation
- Installed plugin list
- VC creation and update
- VC deletion
- VC list
- VC info
- VC KoralQuery
- VC statistics
- VC statistics with KoralQuery