Skip to main content

While calling access token API call successfully getting the access token which is valid for a while for all the RC Apis. But since we get the token, how can we revoke the access token or refresh token if it is compromised.Does RC allows revoking an already generated token like other south servers?

Any oauth server will have revoking token feature if it generate tokens.

For RingCentral you need to call revoke token endpoint:

/restapi/oauth/revoke
Authorization: Basic M2ZmYjNlMThkZDU4ZDE1YTk2NTIwYmFmNzUzZjBiNzk6MzI5OWQ0NTg5NGU1Njg5ODllOTY1ZTFiMTk5MGU2OTI 
token=<Your token to revoke>


refer the docs here: https://developers.ringcentral.com/api-reference/Revoke-Token


Reply