Open AccessOAuth 2.0 Token Revocation
Author(s) -
S. Dronia,
M. Scurtescu
Publication year - 2013
Publication title -
rfc
Language(s) - English
Resource type - Reports
DOI - 10.17487/rfc7009
Subject(s) - security token , revocation , authorization , computer science , computer security , server , computer network , database , operating system , overhead (engineering)
This document proposes an additional endpoint for OAuth authorizationservers, which allows clients to notify the authorization server thata previously obtained refresh or access token is no longer needed.This allows the authorization server to clean up security credentials.A revocation request will invalidate the actual token and, ifapplicable, other tokens based on the same authorization grant.
Accelerating Research
Robert Robinson Avenue,
Oxford Science Park, Oxford
OX4 4GP, United Kingdom
Address
John Eccles HouseRobert Robinson Avenue,
Oxford Science Park, Oxford
OX4 4GP, United Kingdom