You are viewing an old version of this page. View the current version.
Compare with Current View Page History
Version 1 Next »
The Token Revoke endpoint allows your application to revoke access to a client by revoking the access or refresh token associated with that client. You can find this endpoint from the OAuth Discovery Endpoint.
https://<EID Server>/oauth/.well-known/openid-configuration
1. Initiate a request to the EmpowerID Token endpoint, https://<EID Server>/oauth/v2/token
https://<EID Server>/oauth/v2/token
POST /oauth/v2/userinfo HTTP/1.1 Host: <EID Server> Content-Type: application/x-www-form-urlencoded Cache-Control: no-cache Authorization: Basic base64Encode(<ClientID>:<ClientSecret>) token={Your access token} &token_type_hint=refresh_token/access_token
Header Parameter
Required/Optional
Description
Content-Type
required
Must be application/x-www-form-urlencoded.
application/x-www-form-urlencoded
Authorization
Base64 encoded value of ClientID and Client Secret base64Encode(<client_id>:<client_secret>)
base64Encode(<client_id>:<client_secret>)
Post Body Parameter
token
Must be the access token or refresh token
token_type_hint=refresh_token OR token_type_hint=access_token
token_type_hint=refresh_token
token_type_hint=access_token
If the token is a refresh token, set token_type_hint=refresh_token; otherwise, set token_type_hint=access_token
2. Returns null if the token has been successfully removed.
IN THIS ARTICLE