Skip to content

Commit

Permalink
doc: clarify token revocation (some further edits)
Browse files Browse the repository at this point in the history
[#177045463]
  • Loading branch information
peterhaochen47 committed Mar 5, 2024
1 parent e1d0a69 commit 78908b6
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions uaa/slateCustomizations/source/index.html.md.erb
Original file line number Diff line number Diff line change
Expand Up @@ -380,7 +380,7 @@ _Response Fields_

Both access and refresh tokens can be passed to the ``/revoke`` endpoint.

When an access token is successfully passed to the ``/revoke`` endpoint, and then when the same token is
When the ``/revoke`` endpoint is successfully invoked with an access token, and then when the same token is
passed to the UAA Introspect Token endpoint (``/introspect``), the UAA Introspect Token endpoint
will respond with ``"active": false``.

Expand All @@ -398,7 +398,7 @@ the UAA Introspect Token endpoint to validate that the tokens have not been revo
(e.g. a few minutes), and when needed, revoke the more long-lived refresh tokens so that they
may no longer be used to obtain refreshed access tokens.

When a refresh token is successfully passed to the ``/revoke`` endpoint,
When the ``/revoke`` endpoint is successfully invoked with a refresh token,
the refresh token can no longer be used to perform the Refresh Token grant.

Refresh tokens in any format can be revoked using the "Revoke all tokens for a user" endpoint (``/oauth/token/revoke/user/{userId}``),
Expand Down

0 comments on commit 78908b6

Please sign in to comment.