Abstract Class: BaseOAuthRevokeRoute<C, R>

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:31

Handles the OAuth 2.0 token revocation endpoint (RFC 7009). Accepts either a refresh token or an access token in the token parameter — the optional token_type_hint is used only to pick which kind to try first (RFC 7009 §2.1); the other kind is still tried if the hinted lookup doesn't find a match, since a client is allowed to omit or get the hint wrong. Always responds 200, whether or not token actually existed, belonged to a different client, or was already revoked/expired — RFC 7009 §2.2 requires this endpoint to never leak that distinction to the caller. Only a client-authentication failure is reported as an error.

Extended by

• BaseOAuthRevokeRouteMongo
• BaseOAuthRevokeRouteSQL

Type Parameters

C

C extends Client

R

R extends OAuthRefreshToken

Constructors

Constructor

new BaseOAuthRevokeRoute<C, R>(): BaseOAuthRevokeRoute<C, R>

Returns

BaseOAuthRevokeRoute<C, R>

Properties

accessTokenDenylist?

protected optional accessTokenDenylist?: AccessTokenDenylist

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:32

---

clientAuthUtils?

protected optional clientAuthUtils?: ClientAuthUtils

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:37

---

clientClass

abstract protected clientClass: any

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:39

---

clientRepo?

protected optional clientRepo?: RepoUtils<C>

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:41

---

oauthTokenUtils?

protected optional oauthTokenUtils?: OAuthTokenUtils

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:43

---

rateLimiter?

protected optional rateLimiter?: RateLimiter

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:46

---

refreshTokenClass

abstract protected refreshTokenClass: any

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:48

---

refreshTokenRepo?

protected optional refreshTokenRepo?: RepoUtils<R>

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:50

---

signingKeyClass

abstract protected signingKeyClass: any

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:52

Methods

revoke()

revoke(req, res): Promise<any>

Defined in: auth/src/routes/BaseOAuthRevokeRoute.ts:150

Revokes the given token (RFC 7009). Always responds 200 with an empty body — whether or not token actually existed, matched this client, or was already revoked. Only a missing token parameter or a client-authentication failure is reported as an error.

Parameters

req

HttpRequest

res

HttpResponse

Returns

Promise<any>