Skip to content
We just launched Duende IdentityServer v7.2.0 and BFF v3.0. Check it out!

Token Revocation Endpoint

The client library for OAuth 2.0 token revocation is provided as an extension method for HttpClient.

The following code revokes an access token at a revocation endpoint:

var client = new HttpClient();
var result = await client.RevokeTokenAsync(new TokenRevocationRequest
{
Address = "https://demo.duendesoftware.com/connect/revocation",
ClientId = "client",
ClientSecret = "secret",
Token = accessToken
});

The response is of type TokenRevocationResponse gives you access to the raw response and to a parsed JSON document (via the Raw and Json properties).

Before using the response, you should always check the IsError property to make sure the request was successful:

if (response.IsError) throw new Exception(response.Error);