Revoke access token - Web API ( OAuth2 )

Question

I secure Web API with OAuth2. How can i revoke access token when user logout ?

Something like : api/issuedtoken?token="token string".

Answer 1

RFC 7009 (OAuth 2.0 Token Revocation) is a standard specification defining an API to revoke an access token or a refresh token. If your authorization server provides the revocation API, you can call it whenever you want to revoke an access token.