Revoke Token

To invalidate a previously issued customer access token or customer refresh token, use the /oauth/revoke endpoint.

Request Method: POST

Request Host: shop host (e.g. https://{{handle}}.shoplineapp.com)

Request Endpoint: /oauth/revoke

Request Body:

NameTypeExample
tokenString<access token or refresh token>
client_idString<client id from Open API oauth application>
client_secretString<client secret from Open API oauth application>

Request URL example:

POST {{shop_host}}/oauth/revoke

Example Response:

Status Code

Example Response Body

200 OK

The token was successfully revoked.

{}

403 Forbidden

Invalid token, client id or client secret

{  
   "error": "unauthorized_client", 
   "error_description": "You are not authorized to revoke this token" 
}