Revoke Token

Revokes an access token or a refresh token (and the grant behind it). It always answers 200, whether or not the token existed. Users can also disconnect a connector from Dashboard → Apps.

POST/api/oauth/revoke

Authentication

Noneno credentials

Public clients send client_id and the token. Confidential clients also send client_secret.

Query Parameters

tokenstring

required

The access token or refresh token to revoke.

client_idstring

required

The client the token was issued to.

client_secretstring

optional

Only for confidential clients.

Responses

200Success

application/json

statusstring

Request

curl --request POST \
  --url "https://app.pandaidx.com/api/oauth/revoke" \
  --header "Content-Type: application/json" \
  --data-raw '{"token": "{{refresh_token}}", "client_id": "{{client_id}}"}'

Response200 OK

{
  "status": "ok"
}