OAuth Token Revocation
Revoke an OAuth 2.0 access token or refresh token to immediately invalidate it.
¶ Endpoint
POST https://auth.uber.com/oauth/v2/revoke
¶ Parameters
| Parameter | Type | Required | Description |
|---|---|---|---|
| token | string | Yes | The access token or refresh token to revoke. |
¶ Request
curl -X POST https://auth.uber.com/oauth/v2/revoke \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "token=YOUR_TOKEN_HERE"
¶ Responses
- Success
HTTP 200
{
"message": "OK"
}
- Error
HTTP 400
{
"error": "invalid_request"
}
¶ Behavior
- Success response is returned for both valid and invalid tokens
- Revoked tokens cannot be used for API calls
- Only revokes the specific token provided — does not affect other tokens
- Request must use POST method with form data
¶ Examples
- Revoke an access token
curl -X POST https://auth.uber.com/oauth/v2/revoke \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "token=KA.eyJ2ZXJzaW9uIjoyLCJpZCI6IlRqWnYiLCJleHAiOjE2..."
- Revoke a refresh token
curl -X POST https://auth.uber.com/oauth/v2/revoke \
-H "Content-Type: application/x-www-form-urlencoded" \
-d "token=MA.CAESEJPJmj3tMYyoQVOvBJ7aHm7k2h..."