Revoke an access or refresh token
Revoke an access or refresh token
POST
Revoke an access or refresh token
Authorizations
Use client_id as username and client_secret as password for confidential server-side calls. The application allowed_scopes still gate each /v2 endpoint; never use this secret in browsers, mobile apps, logs, or query strings. Server integrations may alternatively send x-client-id and x-client-secret headers (the legacy x-invoiceedge-* names remain accepted).
Body
application/x-www-form-urlencoded
Response
Revocation request accepted.
Revoke an access or refresh token