1. Backboard SSO
  2. Revoke Token

​
Overview

Revoke an access or refresh token (RFC 7009).

Content-Type: application/x-www-form-urlencoded

Both client_id and client_secret are required. Revocation cannot be done with PKCE alone.

​
Form fields

FieldRequiredDescription
tokenYesAccess or refresh token to revoke
client_idYesOAuth App Key
client_secretYesOAuth App Secret
token_type_hintNoAccepted for compatibility

​
Response

HTTP 200 with an empty JSON object {} on success.

See SSO for examples.