Revoke a Token

post

https://api.proof.com/oauth/v2/revoke

Revokes an access token or refresh token issued to the authenticated client, per RFC 7009. Client authentication uses client_secret_post, client_secret_basic or private_key_jwt. Responds 200 for a revoked token and for an unknown token.

Recent Requests

Time	Status	User Agent
Retrieving recent requests…

Loading…

Form Data

token

string

required

The access token or refresh token to revoke, issued to the authenticated client.

token_type_hint

string

enum

A token_type_hint for the submitted token.

Allowed:

client_id

string

Your client_id.

client_secret

string

Your client secret, for client_secret_post client authentication.

client_assertion_type

string

enum

Set to urn:ietf:params:oauth:client-assertion-type:jwt-bearer for private_key_jwt client authentication.

Allowed:

client_assertion

string

A JWT signed with one of your registered keys, for private_key_jwt client authentication: iss and sub are your client_id, aud is the issuer or the token endpoint URL, with exp and a single-use jti.

Responses

200successful

403Forbidden