Revoke an access token
RFC 7009. Always answers 200, even for unknown tokens. The next request with a revoked token gets `401 token_revoked`.
RFC 7009. Always answers 200, even for unknown tokens. The next request with a revoked token gets 401 token_revoked.
Authorization
clientAuth Client authentication at the token and revocation endpoints: private_key_jwt (client_assertion), client_secret_basic (HTTP Basic) or client_secret_post.
In: header
Request Body
application/x-www-form-urlencoded
TypeScript Definitions
Use the request body type in TypeScript.
Response Body
application/json
application/json
curl -X POST "https://example.com/oauth/revoke" \ -H "Content-Type: application/x-www-form-urlencoded" \ -d 'client_id=edf_test_cli_4sQn8XkP2mVb7RtY1wLcZd&client_secret=edf_test_cs_placeholder&token=eyJhbGciOiJFUzI1NiJ9.e30.sig'Cette page vous a-t-elle été utile?
Token signing keys GET
Public keys of the access-token signing keys (ES256). Two keys are published during a rotation.
Acknowledge a request from the EMR POST
Marks an open request as seen when a clinician handles it in the EMR. The patient sees the same result as a console acknowledgement: "Seen by {name}" for a linked practitioner, otherwise the generic care-team copy. Already acknowledged answers 200 with the current state; resolved or cancelled answers `409 conflict`. Requires the site's request write-back switch.