Revoke Token
OAuth 2.1 & OIDC
Revoke Token
RFC 7009 token revocation. Revokes an access or refresh token. Always returns 200 (per spec) even if the token is unknown, to prevent token enumeration.
POST
Revoke Token
Authorizations
EdDSA-signed JWT obtained via OAuth 2.1 client_credentials or CIBA
Response
Empty body (RFC 7009)
Empty body (RFC 7009)