!!! Overview
[{$pagename}]
!! [OAuth 2.0 Token Revocation] ([RFC 7009])
[OAuth 2.0 Token Revocation] ([RFC 7009]) is where the [OAuth Client] constructs the [{$pagename}] by including the following parameters using the "application/x-www-form-urlencoded" format in the [HTTP Request] entity-body:
* [token] - [REQUIRED] - The token that the client wants to get revoked.
* [token_type_hint] - [OPTIONAL] A hint about the type of the token submitted for revocation. Clients [MAY] pass this parameter in order to help the [Authorization Server] to optimize the token lookup. If the server is unable to locate the token using the given hint, it [MUST] extend its search across all of its supported token types. An [Authorization Server] [MAY] ignore this parameter, particularly if it is able to detect the token type automatically. This specification defines two such values:
** access_token: An access token as defined in [RFC 6749], Section 1.4
** refresh_token: A refresh token as defined in [RFC 6749], Section 1.5
** Specific implementations, profiles, and extensions of this specification MAY define other values for this parameter using the registry defined in [RFC 7009] Section 4.1.2.
* [credentials] - The client also includes its authentication credentials as described in Section 2.3. of [RFC 6749].
!! More Information
There might be more information for this subject on one of the following:
[{ReferringPagesPlugin before='*' after='\n' }]