Revoke user OAuth consent

DELETE

/api/admin/users/{userId}/consents/{clientId}

Code sample: Shell / cURL

curl --request DELETE \
  --url https://auth.example.com/api/admin/users/example/consents/example \
  --header 'Authorization: Bearer <token>'

Records the withdrawal, revokes the user’s refresh tokens for one OAuth client, then revokes the consent, records consent history, and invalidates consent cache. From the withdrawal on, the token endpoint refuses refresh tokens and grants issued before it. If any step fails the request fails and the consent is kept, so a retry completes it.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Path Parameters

userId

required

string

clientId

required

string

Responses

200

Consent revoked.

Media type application/json

object

success

required

boolean

key

additional properties

Example

{
  "success": true
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}