Service: OAuth2 Token Revocation via Super Client

** WARNING: This service is experimental and may change without any notice.

revokes a refresh token of any user-authorized client via a super client, such as Kalamar. When revoking a refresh token, all access tokens associated with the refresh token will also be revoked. A HTTP response with status code 200 is sent for both successful token revocation and requests with invalid token. According to RFC 7009, invalid tokens do not cause errors because the invalidation has already achieved. User and super client authentications are required. This service is not part of the general OAuth2 specification.

Available in: full version

Method: POST

Service URL: root/oauth2/revoke/super

Parameters

Header Parameters

Name	Required	Description	Value
Authorization	yes	User authentication using HTTP authentication scheme Bearer	OAuth2 access token
Content-Type	yes	content type of the input data	application/x-www-form-urlencoded

Form Parameters

Name	Required	Description	Type
super_client_id	yes	a super client id	String
super_client_secret	yes	the super client secret	String
token	yes	a refresh token or an access token	String

Examples

curl -H 'Authorization: Basic dXNlcm5hbWU6cGFzc3dvcmQ=' 
     -H 'Content-Type: application/x-www-form-urlencoded' 
     -d 'super_client_id=fCBbQkAyYzI4NzUxMg&super_client_secret=
         y8KvA9B7eWnlP2fMq1dU&token=kEgl6pY0cSmH5i2DnzJ'
     http://localhost:8089/api/v1.0/oauth2/revoke/super