Revoke a token

Invalidate an access or refresh token.

POST /oauth/revoke

Revoke an OAuth token

cURL

curl --request POST \
  --url https://api.swapnice.com/oauth/revoke \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/x-www-form-urlencoded' \
  --data 'token=<string>'

401

{
  "error": {
    "code": "consent_denied",
    "message": "<string>",
    "request_id": "<string>",
    "details": [
      {
        "code": "<string>",
        "message": "<string>",
        "field": "<string>"
      }
    ]
  }
}

Invalidate an access or refresh token.

Do not send a Bearer header. Body is { "token": "..." }.

Authorizations

Authorization · string · header · required

OAuth 2.1 authorization code with PKCE. Implicit and password flows are unsupported.

Body

application/x-www-form-urlencoded

token · string · required

token_type_hint · enum<string>

Available options: access_token, refresh_token

Response

200

Token was revoked or was already inactive.