Revoke OAuth Application

Revoke an OAuth application (sets status to revoked).

Endpoint

POST /api/v1/organizations/{org_id}/oauth-applications/{app_id}/revoke

Headers

Header	Required	Description
Authorization	Yes	Bearer <access_token>

Path Parameters

Parameter	Type	Required	Description
org_id	integer	Yes	Organization ID
app_id	integer	Yes	Application ID

Response

Success (200)

{
  "success": true,
  "data": {
    "message": "OAuth application revoked successfully"
  },
  "message": "OAuth application revoked successfully. All tokens have been invalidated."
}

Error (404)

{
  "success": false,
  "error": {
    "code": "application_not_found",
    "message": "Application not found"
  }
}

Features

• Sets application status to "revoked"
• Invalidates all existing tokens for this application
• Application cannot be used until re-enabled
• Reversible (can be re-enabled via update endpoint)
• Only accessible by organization admins

Example

curl -X POST "https://api.rivergen.com/api/v1/organizations/1/oauth-applications/1/revoke" \
  -H "Authorization: Bearer <access_token>"

Related Endpoints

• Update Application - Re-enable application
• Delete Application - Permanently delete