Revoke Access Token

Instead of letting a token time out, you can actively revoke tokens to free up a connections against active users.

Step 1

Create a new POST request pointing to the /core/connect/revocation endpoint on auth server.

Step 2

On the Authorization tab, select Basic Auth on the TYPE dropdown and enter your ClientID into the Username field and your Secret into the Password field.

976

Step 3

On the Body tab, select x-www-form-urlencoded for the type and enter the following keys and values:

  • token: the token to revoke
  • token_type_hint: either access_token or refresh_token
952