Revoke an OAuth token (access or refresh)
POST/oauth/revoke
- Revokes the specified OAuth token (must be done separately for access token and refresh token)
- Providers must validate that the revocation is initiated by the legitimate client
- Providers can deploy this endpoint under a separate base path (e.g., without a version number). SIX forwards the requests accordingly.
Request
Responses
- 200
- 400
- 401
- 403
- 406
- 415
- 500
- 502
- 504
OAuth token revocation success
Response Headers
Client defined ID from request to correlate HTTP requests between a client and a server
Indicates whether the response was created by the bLink platform or by the provider.
must include: no-store
must be: no-cache
Bad Request - The format of the request was invalid.
Response Headers
always en
Client defined ID from request to correlate HTTP requests between a client and a server
Unauthorized - Client authentication failed.
Response Headers
always en
Client defined ID from request to correlate HTTP requests between a client and a server
Forbidden - Access to endpoint denied.
Response Headers
always en
Client defined ID from request to correlate HTTP requests between a client and a server
Not Acceptable
Response Headers
always en
Client defined ID from request to correlate HTTP requests between a client and a server
Unsupported Media Type
Response Headers
always en
Client defined ID from request to correlate HTTP requests between a client and a server
Internal Server Error
Response Headers
always en
Client defined ID from request to correlate HTTP requests between a client and a server
Bad Gateway
Response Headers
always en
Client defined ID from request to correlate HTTP requests between a client and a server
Gateway Timeout - The service provider did not answer in the required time.
Response Headers
always en
Client defined ID from request to correlate HTTP requests between a client and a server