Identity and Access Management API, REST: RefreshToken.Revoke
Revoke Refresh Tokens. Several Refresh Tokens can be revoked by one request.
HTTP request
POST https://iam.api.cloud.yandex.net/iam/v1/refreshTokens:revoke
Body parameters
{
// Includes only one of the fields `refreshTokenId`, `refreshToken`, `revokeFilter`
"refreshTokenId": "string",
"refreshToken": "string",
"revokeFilter": {
"clientId": "string",
"subjectId": "string",
"clientInstanceInfo": "string"
}
// end of the list of possible fields
}
Revoke Refresh Token request.
If none of the parameters refresh_token_id, refresh_token, or revoke_filter are provided, all Refresh Tokens for the current subject will be revoked.
Field |
Description |
refreshTokenId |
string Identifier of the Refresh Token to be revoked. Includes only one of the fields |
refreshToken |
string The Refresh Token to be revoked. Includes only one of the fields |
revokeFilter |
The filter for revoking Refresh Token Includes only one of the fields |
RevokeFilter
The Filter object allows filtering Refresh Tokens that will be revoked.
It contains three optional fields.
When multiple fields are provided, they are combined using a logical AND operation.
Field |
Description |
clientId |
string The OAuth client identifier for which the Refresh Token was issued. |
subjectId |
string The subject identifier for whom the Refresh Token was issued. |
clientInstanceInfo |
string Information about the app for which the Refresh Token was issued. |
Response
HTTP Code: 200 - OK
{
"id": "string",
"description": "string",
"createdAt": "string",
"createdBy": "string",
"modifiedAt": "string",
"done": "boolean",
"metadata": {
"subjectId": "string",
"refreshTokenIds": [
"string"
]
},
// Includes only one of the fields `error`, `response`
"error": {
"code": "integer",
"message": "string",
"details": [
"object"
]
},
"response": {
"refreshTokenIds": [
"string"
]
}
// end of the list of possible fields
}
An Operation resource. For more information, see Operation.
Field |
Description |
id |
string ID of the operation. |
description |
string Description of the operation. 0-256 characters long. |
createdAt |
string (date-time) Creation timestamp. String in RFC3339 To work with values in this field, use the APIs described in the |
createdBy |
string ID of the user or service account who initiated the operation. |
modifiedAt |
string (date-time) The time when the Operation resource was last modified. String in RFC3339 To work with values in this field, use the APIs described in the |
done |
boolean If the value is |
metadata |
Service-specific metadata associated with the operation. |
error |
The error result of the operation in case of failure or cancellation. Includes only one of the fields The operation result. |
response |
The normal response of the operation in case of success. Includes only one of the fields The operation result. |
RevokeRefreshTokenMetadata
Field |
Description |
subjectId |
string |
refreshTokenIds[] |
string Id of revoked Refresh Tokens. |
Status
The error result of the operation in case of failure or cancellation.
Field |
Description |
code |
integer (int32) Error code. An enum value of google.rpc.Code |
message |
string An error message. |
details[] |
object A list of messages that carry the error details. |
RevokeRefreshTokenResponse
Field |
Description |
refreshTokenIds[] |
string Id of revoked Refresh Tokens. |