Openapi
OAuth2 token revocation (RFC 7009)
Revokes an access or refresh token. Accepts JSON or form-urlencoded.
Revokes an access or refresh token. Accepts JSON or form-urlencoded.
Request Body
application/json
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
curl -X POST "https://example.com/api/v1/oauth/revoke" \ -H "Content-Type: application/json" \ -d '{ "token": "string" }'Empty
{ "success": false, "error": { "code": "BAD_REQUEST", "message": "Request body is empty. Expected JSON with action field.", "request_id": "req_abc123", "documentation_url": "https://dev-developer.totalaccess.co.za/docs/api-reference/errors#bad_request" }}OAuth2 token endpoint POST
Exchanges an authorization code for access and refresh tokens, or refreshes an expired access token. Supports `authorization_code` and `refresh_token` grant types, as well as `client_credentials` for server-to-server. Accepts both `application/json` and `application/x-www-form-urlencoded` bodies.
OIDC UserInfo endpoint GET
Returns information about the authenticated user (or app for client_credentials flow).