Token revocation rfc7009

Open carayolthomas opened this issue 4 years ago • 2 comments

This PR implements the rfc7009.

Token revocation is available on iOS thanks to the OIDEndSessionRequest. However, on tvOS, AppAuth doesn't have anything to really logout a user. In such cases, it appears that AppAuth should give us (developers) a way to revoke accessToken and refreshToken.

This first commit is about parsing the revocation_endpoint if it exists during the discovery phase.

The second commit implements the OIDRevokeTokenRequest and OIDRevokeTokenResponse to be able to revoke tokens from the OIDTVAuthorizationService.

Mar 31 '21 15:03 carayolthomas

Any progress on this? I would be interested to have that feature in the library. Are there any recommendations to support the revocation endpoint with the current version?

Jan 26 '23 10:01 retendo

Up ! No news on that ?

Apr 03 '24 18:04 ChrisProlls