Revoking Access Tokens
If your app no longer needs an access token, you can revoke it by sending an HTTP POST request to https://id.twitch.tv/oauth2/revoke
. The following table lists the x-www-form-urlencoded parameters that you pass in the body of the request.
Parameter | Required? | Type | Description |
---|---|---|---|
client_id | Yes | String | Your app’s client ID. See Registering your app. |
token | Yes | String | The access token to revoke. |
The following cURL example shows how to revoke a user or app access token:
curl -X POST 'https://id.twitch.tv/oauth2/revoke' \
-H 'Content-Type: application/x-www-form-urlencoded' \
-d 'client_id=<client id goes here>&token=<access token goes here>'
If the revocation succeeds, the request returns HTTP status code 200 OK (with no body).
If the revocation fails, the request returns one of the following HTTP status codes:
-
400 Bad Request if the client ID is valid but the access token is not.
{ "status": 400, "message": "Invalid token" }
-
404 Not Found if the client ID is not valid.
{ "status": 404, "message": "client does not exist" }