Revoke Token

POST

/oauth/revoke

Revoke an access token or refresh token.

Per OAuth 2.0 spec, this endpoint always returns 200 OK, even if the token doesn't exist.

Request

Body Params application/jsonRequired

Examples

Responses

🟢200

Token revoked (or was already invalid)

This response does not have a body.

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST 'https://api.dev.opensylo.com/oauth/revoke' \
--header 'Content-Type: application/json' \
--data-raw '{
    "token": "string",
    "token_type_hint": "access_token"
}'

Modified at 2025-12-30 08:04:15

Token Endpoint

Client Metadata