Revoke a token

POST

https://api.opensylo.com/oauth/revoke

Revokes an access token or refresh token. Per RFC 7009, this endpoint
always returns 200 regardless of whether the token was valid.

Request

Body Params application/x-www-form-urlencodedRequired

🟢200OK

application/json

Token revoked (or was already invalid).

Bodyapplication/json

Request Example

Shell

JavaScript

Java

Swift

curl --location 'https://api.opensylo.com/oauth/revoke' \
--data-urlencode 'token=' \
--data-urlencode 'token_type_hint='

Response Example

{
    "success": true
}

Modified at 2026-06-10 14:59:29