Stack Overflow
Stack Overflow

Questions tagged [revoke-token]

Use with questions about token (either access or refresh) revocation, a process of notifying the authorization server issuing a token that it should no longer be used.

Usage guidance

Use for questions on the security procedure of revoking tokens.

Always use with the main tag:

About

Token revocation is a procedure defined by RFC 7009 for revoking access or refresh tokens obtained via the OAuth 2.0 authorization mechanism. Tokens are revoked via a POST request to a special secure endpoint URL. According to the standard, the procedure is as follows:

  1. The client sends an application/x-www-form-urlencoded payload in an authenticated request to the endpoint with fields:
Key Meaning Required? Allowed values
token the token to be revoked yes -
token_type_hint type of the token to be revoked no access_token, refresh_token

  1. The server validates request credentials and that the token was ever issued.

  2. If both checks in step 2 pass, the server invalidates the token, else the request is refused. In both cases, an HTTP 200 response is sent.

    In the case of an unsupported token type, the server sends an HTTP 400 response structured as defined in RFC 6749. A revocation-specific error code unsupported_token_type is included in the response.

    In case of server error, an HTTP 503 response is sent, and the client is free to retry the request immediately or after a specified amount of time if an optional Retry-After header is present.

23 questions
2
votes
0 answers

Withings API disconnect/revoke token

I'm getting Withings data into my android app, and I want that when the user clicks on a disconnect button the Withings account gets disconnected. But there is no URL to call to disconnect or revoke token in Withings API. So now the user stays…
DojaB
  • 61
  • 3
1
vote
0 answers

AWS Cognito revoke apple login

5.1.1 Legal: Privacy - Data Collection and Storage Apps that offer Sign in with Apple should use the Sign in with Apple REST API to revoke user tokens. REST API to revoke user tokens doc…
matrixmann
  • 11
  • 2
1
vote
1 answer

Revoking Google Identity (Sign in with Google version 2022) in Server Side

Background Google is kicking people out of Google Sign-in JavaScript library (platform.js) and pushing people to migration Sign In With Google by Google Identity Services library (gsi/client). (Migration Guide) Anyone must go through this migration…
Aidin
  • 25,146
  • 8
  • 76
  • 67
1
vote
2 answers

How can revoke token in multi authenticate in laravel?

I wrote a login method, and it worked. My auth config: 'guards' => [ 'web' => [ 'driver' => 'session', 'provider' => 'users', ], 'api' => [ 'driver' => 'passport', 'provider'…
Maryam
  • 365
  • 2
  • 15
0
votes
0 answers

Can I revoke access token using authorization service in oauth 2.0

Like in question I need to be able to revoke access token from my authorization service. To be more exact I have situation: Client calls my Authorization Service (AS) to get the access token. Then he is doing something within client app. Now i need…
Raiden
  • 1
  • 2
0
votes
0 answers

Oauth refresh token revoke vs delete

Can someone explain me why we revoke refresh token instead of simply delete them? I'm trying to understand in which case deletion could cause issue.
Steve
  • 309
  • 3
  • 17
0
votes
0 answers

Token Revocation Endpoint callback by google

We are using google's OAuth 2.0 framework to acquire access to user's gmail account. Now if a user unlinks google account from google paltform we would want to get a notification in order to nudge user. Acc to…
Sansan
  • 41
  • 1
0
votes
0 answers

Token is not revoked by calling wso2 revoke access API. Using WSO2 4.1.0

I am using wso2 4.1.0 and trying to revoke access token by calling WSO2 revoke API /oauth2/revoke. But able to use token even after revoke. Checked the revoke access API response in saml and response seems correct. I am using wso2 4.1.0
IshaS
  • 1
0
votes
0 answers

Apple REST API Revoke Auth

https://appleid.apple.com/auth/revoke This api for revoking auth from the apple account and getting 200 OK response but still not able unlink apps from apple so do we need to call token api for an access token? If yes here is the screenshot. API for…
Aadil Dhanani
  • 1
  • 2
0
votes
0 answers

Token has been expired or revoked while using Java Servlet

I am new to java. I have to fetch contacts from google contacts and store it in MySQL table. I got the code from google documentation. I am using Java Servlet without gradle. I got the error while run the code on Servlet class but its work correctly…
Vishnu MCA
  • 1
  • 1
0
votes
1 answer

Revoke saml token

Can we revoke saml token in azure aad .i got to see revoking refresh tokens documentations but i never saw any document for revoking saml token.is there any possibility to revoke saml token from azure AAD ?
mukesh36
  • 29
  • 2
0
votes
1 answer

Revoke Apple account access in Android using Firebase

I have implemented apple account authentication in Android by using Firebase https://firebase.google.com/docs/auth/android/apple We have to revoke the access for apple account in our application. For iOS, authorisation code can be fetched from…
user3752302
  • 21
  • 3
0
votes
1 answer

Clean OAuth2 token in swift

In swift I'm calling successfully a callback URL which revoke a token after the user is logout, and right after I call this to enable re-logging func runOauth(){ self.loadingLabel.isHidden=true let appDelegate = UIApplication.shared.delegate…
Camille Gallet
  • 83
  • 7
0
votes
1 answer

How to revoke Azure AD Oauth token?

I set up Azure Active Directory (AAD) based authentication and received Azure AD Oauth token to start exploring Microsoft Dynamics 365 Business Central API…
Eugene Reyek
  • 46
  • 3
0
votes
0 answers

Revoke keycloak token angular logout

i’m wondering Why with this my access_token is not revoked when i use this in the logout button, can someone give some help please ? revokeToken() { enter code here const httpOptions = { headers: new HttpHeaders({ …
i-23
  • 1
  • 1
1
2