Revoke Token

To invalidate a previously issued customer access token or customer refresh token, use the /oauth/revoke endpoint.

Request Method: POST

Request Host: shop host (e.g. https://{{handle}}.shoplineapp.com)

Request Endpoint: /oauth/revoke

Request Body:

NameTypeExample
tokenString<access token or refresh token>
client_idString<client id from Open API oauth application>
client_secretString<client secret from Open API oauth application>

Request URL example:

POST {{shop_host}}/oauth/revoke

Example Response:

Status CodeExample Response Body
200 OKThe token was successfully revoked.

{}
403 ForbiddenInvalid token, client id or client secret

{ "error": "unauthorized_client", "error_description": "You are not authorized to revoke this token" }