POST oauth2/invalidate_token

Updated on Mon, 2013-03-11 13:54

Allows a registered application to revoke an issued OAuth 2 Bearer Token by presenting its client credentials. Once a Bearer Token has been invalidated, new creation attempts will yield a different Bearer Token and usage of the invalidated token will no longer be allowed.

As with all API v1.1 methods, HTTPS is always required.

Successful responses include a JSON-structure describing the revoked Bearer Token.

Resource URL

https://api.twitter.com/oauth2/invalidate_token

Parameters

See Application-only authentication for instructions on how to use this method.

access_token required

The value of the bearer token to revoke.

Example Request

POST /oauth2/invalidate_token HTTP/1.1
Authorization: Basic eHZ6MWV2R ... o4OERSZHlPZw==
User-Agent: My Twitter App v1.0.23
Host: api.twitter.com
Accept: */*
Content-Length: 119
Content-Type: application/x-www-form-urlencoded

access_token=AAAA%2FAAA%3DAAAAAAAA

Example response:

HTTP/1.1 200 OK
Content-Type: application/json; charset=utf-8
Content-Length: 127
...

{"access_token":"AAAA%2FAAA%3DAAAAAAAA"}