RFC 7009 token revocation. Revokes an access or refresh token. Always returns 200 (per spec) even if the token is unknown, to prevent token enumeration.
EdDSA-signed JWT obtained via OAuth 2.1 client_credentials or CIBA
Empty body (RFC 7009)
Empty body (RFC 7009)