A beta version of the new Box developer documentation site is launching soon! Updated Developer Guides, modern API Reference, and AI-powered search are on the way to help you build with Box faster. Stay tuned for more updates.
Latest version
Revoke access token
API version 2024.0
Revoke an active Access Token, effectively logging a user out that has been previously authenticated.
Request
application/x-www-form-urlencoded
Request Body
stringin bodyoptional
"ly1nj6n11vionaie65emwzk575hnnmrk"The Client ID of the application requesting to revoke the access token.
stringin bodyoptional
"hOzsTeFlT6ko0dme22uGbQal04SBPYc1"The client secret of the application requesting to revoke an access token.
string (token)in bodyoptional
"n22JPxrh18m4Y0wIZPIqYZK7VRrsMTWW"The access token to revoke.
Response
none
Returns an empty response when the token was successfully revoked.
application/jsonOAuth 2.0 error
An authentication error.
application/jsonOAuth 2.0 error
An authentication error.
Request Example
cURL
curl -i -X POST "https://api.box.com/oauth2/revoke" \
-H "content-type: application/x-www-form-urlencoded" \
-d "client_id=[CLIENT_ID]" \
-d "client_secret=[CLIENT_SECRET]" \
-d "token=[ACCESS_TOKEN]"Node/TypeScript v10
await auth.revokeTokens();
// client's tokens have been revokedPython v10
client.auth.revoke_token().NET v10
await auth.RevokeTokenAsync();Swift v10
try await auth.revokeToken()Java v10
auth.revokeToken();
// client's tokens have been revokedPython v4
oauth.revoke()Node v4
client.revokeTokens("<TOKEN>")
.then(() => {
// the client's access token have been revoked
});