POST oauth/invalidate_token

Allows a registered application to revoke an issued OAuth 1.0a Access Token. Once an Access Token has been invalidated, new creation attempts will yield a different Access Token and usage of the invalidated token will no longer be allowed.

Endpoint URL¶

https://api.twitter.com/1.1/oauth/invalidate_token

Authentication¶

Authentication

Required - OAuth 1.0a User Context

The included Access Token and Secret will be invalidated as a result of a successful request to this endpoint.

Example request

      curl --request POST \
  --url 'https://api.twitter.com/oauth/invalidate_token.json' \
  --header 'Authorization: OAuth oauth_consumer_key="$oauth_consumer_key", oauth_nonce="$oauth_nonce", oauth_signature="$oauth_signature", oauth_signature_method="HMAC-SHA1", oauth_timestamp="$timestamp", oauth_version="1.0"'

Example response

          HTTP/1.1 200 OK
    Content-Type: application/json; charset=utf-8
    Content-Length: 127
    ...

    {"access_token":"ACCESS_TOKEN"}

Example error after token has been invalidated

          HTTP/1.1 401 Authorization Required
    ...

    {"errors": [{
      "code": 89,
      "message": "Invalid or expired token."}
    ]}