Revoke an access token (RFC 7009)

Marks an access token as revoked. Subsequent requests presenting it return 401 unrecognized_token. Always returns 200 for valid client credentials, regardless of whether the token existed — per RFC 7009 to avoid leaking token-existence information.

curl -X POST "https://example.com/oauth/revoke" \  -H "Content-Type: application/json" \  -d '{}'

{}

{  "error": "string",  "error_description": "string"}