- Backboard SSO
- Revoke Token
Backboard SSO
Revoke Token
POST
/oauth/revoke
curl --request POST \
--url https://app.backboard.io/api/oauth/revoke \
--header 'X-API-Key: <api-key>' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data '{
"token": "string",
"client_id": "string",
"client_secret": "string",
"token_type_hint": "string"
}'
curl --request POST \
--url https://app.backboard.io/api/oauth/revoke \
--header 'X-API-Key: <api-key>' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data '{
"token": "string",
"client_id": "string",
"client_secret": "string",
"token_type_hint": "string"
}'Overview
Revoke an access or refresh token (RFC 7009).
Content-Type: application/x-www-form-urlencoded
Both client_id and client_secret are required. Revocation cannot be done with PKCE alone.
Form fields
| Field | Required | Description |
|---|---|---|
token | Yes | Access or refresh token to revoke |
client_id | Yes | OAuth App Key |
client_secret | Yes | OAuth App Secret |
token_type_hint | No | Accepted for compatibility |
Response
HTTP 200 with an empty JSON object {} on success.
See SSO for examples.
curl --request POST \
--url https://app.backboard.io/api/oauth/revoke \
--header 'X-API-Key: <api-key>' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data '{
"token": "string",
"client_id": "string",
"client_secret": "string",
"token_type_hint": "string"
}'
curl --request POST \
--url https://app.backboard.io/api/oauth/revoke \
--header 'X-API-Key: <api-key>' \
--header 'Content-Type: application/x-www-form-urlencoded' \
--data '{
"token": "string",
"client_id": "string",
"client_secret": "string",
"token_type_hint": "string"
}'