Revoke a token (RFC 7009)

POST /oauth/revoke

Revoking either an access token or a refresh token kills the ENTIRE grant it belongs to, not just the token presented — a client the user disconnected must not keep a live refresh token. Accepts form-encoded or JSON and authenticates the client exactly as `POST /oauth/token` does. Always answers 200, including for unknown, already-revoked, or another client's token, so this endpoint cannot be used as a token oracle. To revoke from the user side instead, use `DELETE /oauth/grant/{id}`.

curl -X POST 'https://api.elaichi.ai/oauth/revoke' \
  -H 'Content-Type: application/json'

const response = await fetch('https://api.elaichi.ai/oauth/revoke', {
  method: 'POST',
  headers: {
    'Content-Type': 'application/json',
  },
});

const data = await response.json();
console.log(data);

import os
import requests

url = "https://api.elaichi.ai/oauth/revoke"
headers = {
    "Content-Type": "application/json",
}

response = requests.post(url, headers=headers)
print(response.json())