Token revocation

Introduction

Token revocation is a mechanism that allows users to invalidate a refresh token that has been issued to a client. Once a refresh token is revoked, it can no longer be used to obtain new access tokens.

It consists of the following steps:

1. The client makes a request to revoke a refresh token using the client credentials.
2. The given refresh token is invalidated, and a response is received with the 200 status.

The different steps are described in detail below.

Revoking a refresh token

To revoke a refresh token, the following URL should be used:

• https://sso.pageroonline.com/oauth/v2/oauth-revoke

Required query parameters:

Required headers:

Example

  
curl --location 'https://sso.pageroonline.com/oauth/v2/oauth-revoke' \
  -d 'token=_1XBPWQQ_343bda39-0d5b-4702-9ce3-46fc3fb984d8' \
  --user 'client_id:client_secret'

The empty response will be received with the 200 status.