Revoke of access-token is not supported for Authorization Code Flow due to their short lifespan. Instead, the revoke is done on the refresh-token to prevent new access-tokens from being created.
POST https://apps.fortnox.se/oauth-v1/revokeHeaders example
ClientId: 8VurtMGDTeAI
ClientSecret: yFKwme8LEQ
Credentials: OFZ1cnRNR0RUZUFJOnlGS3dtZThMRVE=
Credentials is the Base64 encoding of ClientId and Client-Secret, separated with a colon.
Content-type: application/x-www-form-urlencoded
Authorization: Basic {Credentials}Body example
token_type_hint=refresh_token&token={Refresh-Token}{
"revoked":true
}See our comprehensive documentation regarding the Fortnox API.
Approximately half a million customers are waiting for your integration at our Integrations page.