token revocation

This article is a stub. You can help the IndieWeb wiki by expanding it.

token revocation is the process of revoking an OAuth token https://tools.ietf.org/html/rfc7009 / https://indieauth.spec.indieweb.org/#token-revocation.

Implementations

Servers

Servers that support token revocation:

• Mintoken
• Wordpress IndieAuth Plugin
• p3k
• IndieWeb module for Drupal

Clients

• Quill
  • In Quill's settings screen, the "reset" button will also revoke a token.
  • Quill does not revoke the token when logging out of Quill, since it still needs the token for the "post-by-email" function where the user does not have an active session with Quill
• indiebookclub
  • In indiebookclub's settings screen, the "reset login" button will revoke the token.
• ...

See Also

• Token revocation is also part of the IndieAuth specification