How can I invalidate/revoke OAuth 2 access token and refresh token for any end user of app?

[#1]

Hi,

I have a use case where in I need to revoke the access token and refresh token for end users. How this can be achieved in on prem version of Apigee?

Thanks,

Vinita

[adas]

@vinita_dwivedi Please refer to the following section of our doc which refers to this exact usecase:

http://docs.apigee.com/management/apis/post/organizations/%7Borg_name%7D/oauth2/revoke

You can search for tokens or revoke a list of tokens using this mechanism, given the app id or enduser or both. You need to enable this feature by turning on the org level feature flags. The on prem installer also ships with a migration script if you want this feature to work on existing tokens. Let me know if this helps. Kindly accept the answer if it resolves your query.