An endpoint where a client tells the authorization server that a refresh or access token is no longer needed, invalidating it and, where applicable, other tokens from the same grant.
No explainer written for this spec yet. The summary, relations and documented support below are maintained.
An endpoint where a client tells the authorization server that a refresh or access token is no longer needed, invalidating it and, where applicable, other tokens from the same grant.
flowchart LR s_revocation["Token Revocation"] s_oauth2["OAuth 2.0"] s_introspection["Token Introspection"] style s_revocation stroke-width:3px s_revocation -->|Extends| s_oauth2 s_revocation -->|Works with| s_introspection
Adoption lists only support stated in official documentation (the vendor's or project's own, or a standards body's page naming it), and a weekly check confirms the cited phrase is still on that page. Experimental, alpha and beta support is counted separately as preview.
No sourced support entries collected yet. This says nothing about how widely it is used.
Revisions from the Datatracker, explanations from this site's daily runs, and mailing-list subjects naming the draft.
Nothing collected about this spec yet.