import type { RouteGenericInterface, RouteHandler } from "fastify"; import type { RevocationRequestBody, RevokePostConfig } from "../schemas/index.js"; interface RouteGeneric extends RouteGenericInterface { Body: RevocationRequestBody; } /** * Revokes an access token or a refresh token. * * The token to be revoked is NOT NECESSARILY the same token found in the * Authorization header. * * The authorization server first validates the client credentials (in case of a * confidential client) and then verifies whether the token was issued to the * client making the revocation request. If this validation fails, the request * is refused and the client is informed of the error by the authorization server. * * The revocation endpoint responds with HTTP 200 for both the case where the * token was successfully revoked, or if the submitted token was invalid. * * Clients MAY pass the `token_type_hint` parameter in order to help the * authorization server to optimize the token lookup. If the server is unable to * locate the token using the given hint, it MUST extend its search across all * of its supported token types. * * @see [Token revocation - IndieAuth spec](https://indieauth.spec.indieweb.org/#token-revocation) * @see [Revocation Request - OAuth 2.0 Token Revocation (RFC 7009)](https://datatracker.ietf.org/doc/html/rfc7009#section-2.1) * @see [Revocation Response - OAuth 2.0 Token Revocation (RFC 7009)](https://www.rfc-editor.org/rfc/rfc7009.html#section-2.2) */ export declare const defRevocationPost: (config: RevokePostConfig) => RouteHandler; export {}; //# sourceMappingURL=revocation-post.d.ts.map