Revoke a token

POST

/oauth/revoke

Revoke an access token or refresh token. Per the OAuth specification, this endpoint returns 200 OK even if the token is invalid or already revoked.

Request

Body Params application/jsonRequired

Examples

Responses

🟢200

Token revoked (or already invalid)

This response does not have a body.

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://api.opensylo.com/oauth/revoke' \
--header 'Content-Type: application/json' \
--data-raw '{
    "token": "opaque_access_or_refresh_token",
    "token_type_hint": "access_token"
}'

Modified at 2026-01-29 23:19:05

Exchange code or refresh token

OAuth discovery / client metadata