com.nimbusds.oauth2.sdk

Class TokenRevocationRequest

java.lang.Object

com.nimbusds.oauth2.sdk.AbstractRequest

com.nimbusds.oauth2.sdk.TokenRevocationRequest

All Implemented Interfaces:

Message, Request

@Immutable
public final class TokenRevocationRequest
extends AbstractRequest

Token revocation request. Used to revoke an issued access or refresh token.

Example token revocation request with client authentication:

 POST /revoke HTTP/1.1
 Host: server.example.com
 Content-Type: application/x-www-form-urlencoded
 Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW

 token=45ghiukldjahdnhzdauz&token_type_hint=refresh_token
 

Related specifications:

• OAuth 2.0 Token Revocation (RFC 7009), section 2.1.

Constructor Summary

Constructors

Constructor and Description
TokenRevocationRequest(java.net.URI uri, ClientAuthentication clientAuth, Token token)

Method Summary

Methods

Modifier and Type	Method and Description
ClientAuthentication	getClientAuthentication() Gets the client authentication.
Token	getToken() Returns the token to revoke.
static TokenRevocationRequest	parse(HTTPRequest httpRequest) Parses a token revocation request from the specified HTTP request.
HTTPRequest	toHTTPRequest() Returns the matching HTTP request.

Methods inherited from class com.nimbusds.oauth2.sdk.AbstractRequest

getEndpointURI

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, toString, wait, wait, wait

Constructor Detail

TokenRevocationRequest

public TokenRevocationRequest(java.net.URI uri,
                      ClientAuthentication clientAuth,
                      Token token)

Parameters:

uri - The URI of the token revocation endpoint. May be null if the toHTTPRequest() method will not be used.

clientAuth - The client authentication, null if none.

token - The access or refresh token to revoke. Must not be null.

Method Detail

getClientAuthentication

public ClientAuthentication getClientAuthentication()

Gets the client authentication.

Returns:

The client authentication, null if none.

getToken

public Token getToken()

Returns the token to revoke. The instanceof operator can be used to infer the token type. If it's neither AccessToken nor RefreshToken the token_type_hint has not be provided as part of the token revocation request.

Returns:

The token.

toHTTPRequest

public HTTPRequest toHTTPRequest()
                          throws SerializeException

Description copied from interface: Request

Returns the matching HTTP request.

Returns:

The HTTP request.

Throws:

SerializeException - If the request message couldn't be serialised to an HTTP request.

parse

public static TokenRevocationRequest parse(HTTPRequest httpRequest)
                                    throws ParseException

Parses a token revocation request from the specified HTTP request.

Parameters:

httpRequest - The HTTP request. Must not be null.

Returns:

The token revocation request.

Throws:

ParseException - If the HTTP request couldn't be parsed to a token revocation request.