OAuth 2.0 Token Revocation
Endpoint for OAuth authorization servers which allows clients to notify the authorization server that a previously obtained refresh or access token is no longer needed.
- from
- OpenID Connect
- added
- 2026-10-10
- likes
- 0
similar
-
refresh_token datatracker.ietf.org
OAuth 2.0 Refresh Token Grant Type used to exchange a refresh token against a short life access token and sometime a new refresh token as well.
-
OAuth 2.0 for Browser-Based Apps datatracker.ietf.org
Security and usability best practice for OAuth usage in Browser-based apps.
-
OAuth 2.0 Token Introspection datatracker.ietf.org
Method for a protected resource to query an OAuth 2.0 authorization server to determine the active state of an OAuth 2.0 token and to determine meta-information about this token.
-
OAuth 2.0 Attestation-Based Client Authentication datatracker.ietf.org
Extension to OAuth 2.0 enabling public clients to authenticate using key-bound attestations.
-
OAuth 2.0 Threat Model and Security Considerations datatracker.ietf.org
Known threats using OAuth 2.0 / OpenID Connect and countermeasures.
-
OAuth 2.0 Dynamic Client Registration Management Protocol datatracker.ietf.org
Endpoints for management of OAuth 2.0 dynamic client registrations.
OpenID Connect › Resources > Specifications > Published: “Endpoint for OAuth authorization servers which allows clients to notify the authorization server that a previously obtained refresh or access token is no longer needed.”