Revoke a refresh_token

Revokes a refresh_token (RFC 7009). The confidential client must authenticate with
client_id and client_secret in the body or via Authorization: Basic (RFC 6749 §2.3.1).
The token is removed only if it was issued to that client; otherwise the response is still 200.

Recent Requests
Log in to see full request history
TimeStatusUser Agent
Retrieving recent requests…
LoadingLoading…
Body Params
string
required
string
required

May be sent in the body or using an HTTP Basic Authorization header (RFC 6749).

string
required

May be sent in the body or using an HTTP Basic Authorization header (RFC 6749).

Responses
200

OK | The refresh token is revoked, invalid, doesn't exist or was not issued for the client.

Language
URL
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
application/json