Hi, I',m trying to invalidate a refresh_token and its associated access_token with the ff. code
<?xml version="1.0" encoding="UTF-8" standalone="yes"?> <OAuthV2 name="OA-InvalidateRefreshToken"> <DisplayName>OA-InvalidateRefreshToken</DisplayName> <Operation>InvalidateToken</Operation> <Tokens> <Token type="refreshtoken" cascade="true">request.formparam.refresh_token</Token> </Tokens> </OAuthV2>
However, I'm receiving an error of
{ "fault": { "faultstring": "Access Token expired", "detail": { "errorcode": "keymanagement.service.access_token_expired" } } }
I look at the policy, and it seems to be getting the refresh_token value properly, and second, I'm passing a valid refresh_token with an expired access_token. I don't need it to validate whether if the access_token is valid or not as I am going to invalidate both of it anyway.
Is there any param like in
<IgnoreAccessTokenStatus> as seen in GetOAuthV2Info Policy?. So that I could successfuly invalidate both tokens?
User | Count |
---|---|
1 | |
1 | |
1 | |
1 | |
1 |