Skip to content

Token Revocation Endpoint

The client library for OAuth 2.0 token revocation is provided as an extension method for HttpClient.

The following code revokes an access token at a revocation endpoint:

var client = new HttpClient();
var result = await client.RevokeTokenAsync(new TokenRevocationRequest
{
Address = "https://demo.duendesoftware.com/connect/revocation",
ClientId = "client",
ClientSecret = "secret",
Token = accessToken
});

The response is of type TokenRevocationResponse gives you access to the raw response and to a parsed JSON document (via the Raw and Json properties).

Before using the response, you should always check the IsError property to make sure the request was successful:

if (response.IsError) throw new Exception(response.Error);