Forum Discussion
Marvin
Cirrocumulus
CirrocumulusF5 oauth server refresh token revocation
Dear All, I am working on a F5 as the oauth server provider which provides JWT access tokens for oauth clients, everything works fine but now we want to know how to revoke the access / refresh ...
Dave_W
Employee
EmployeeHello Marvin, the Token Revocation Endpoint is not supported with JWT tokens, only with Opaque tokens. As far as I can tell from doing some searching on JWT it appears the short answer is you can not revoke them.
MarvinCirrocumulus
CirrocumulusHi Dave, I found the reference and indeed not supported, I have to see if this is acceptable from security point of view. Thanks for the heads up!