RFC 7009: OAuth 2.0 Token Revocation
In plain English — editorial summary, not part of the RFC
This document proposes an additional endpoint for OAuth authorization servers, which allows clients to notify the authorization server that a previously obtained refresh or access token is no longer needed. This allows the authorization server to clean up security credentials. A revocation request will invalidate the actual token and, if applicable, other tokens based on the same authorization grant.
Document record
- Document ID
- RFC7009
- Published
- August 2013
- Authors
- T. Lodderstedt; S. Dronia; M. Scurtescu
- Status
- PROPOSED STANDARD
- Stream
- IETF
- Area
- sec
- Pages
- 11
- Also known as
- —
Related documents
Ranked automatically by shared keywords, IETF area and stream — not by editorial selection.
- RFC 7018Auto-Discovery VPN Problem Statement and RequirementsCurrent
September 2013
- RFC 7029Extensible Authentication Protocol (EAP) Mutual Cryptographic BindingCurrent
October 2013
- RFC 6989Additional Diffie-Hellman Tests for the Internet Key Exchange Protocol Version 2 (IKEv2)Current
July 2013
- RFC 7030Enrollment over Secure TransportUpdated
October 2013
- RFC 7055A GSS-API Mechanism for the Extensible Authentication ProtocolCurrent
December 2013
- RFC 7056Name Attributes for the GSS-API Extensible Authentication Protocol (EAP) MechanismCurrent
December 2013
- RFC 6961The Transport Layer Security (TLS) Multiple Certificate Status Request ExtensionObsoleted
June 2013
- RFC 7057Update to the Extensible Authentication Protocol (EAP) Applicability Statement for Application Bridging for Federated Access Beyond Web (ABFAB)Current
December 2013
Also filed under
About this page
The document record above — title, authors, date, status, stream, area, relationships, DOI and errata — is imported verbatim from the public RFC Editor index. The “in plain English” section is editorial: written by The metasystema editorial team, not part of the RFC. Where the two differ, the RFC text governs.
Last checked against the RFC Editor index on . RFCs are never revised after publication; changes are issued as new documents.
Data sources · Editorial policy · Report a correction · What is an RFC?