{ "opencollection": "1.0.0", "info": { "name": "Auth0 Authentication actions Revoke Refresh Token API", "version": "1.0.0" }, "items": [ { "info": { "name": "Revoke Refresh Token", "type": "folder" }, "items": [ { "info": { "name": "Auth0 Revoke Refresh Token", "type": "http" }, "http": { "method": "POST", "url": "{auth0_domain}/oauth/revoke", "body": { "type": "json", "data": "{}" } }, "docs": "Use this endpoint to invalidate a Refresh Token if it has been compromised. The behaviour of this endpoint depends on the state of the Refresh Token Revocation Deletes Grant toggle. If this toggle is enabled, then each revocation request invalidates not only the specific token, but all other tokens based on the same authorization grant. This means that all Refresh Tokens that have been issued for the same user, application, and audience will be revoked. If this toggle is disabled, then only the " } ] } ], "bundled": true }