Skip to content
Docs
Open Backstage
Operation

Revoke one of my connected apps

DELETE/me/grants/{grantId}
Revoke one of the signed-in person's grants at the identity issuer, with RFC 7009 semantics: its refresh tokens end with it, so the app cannot renew its access, and an access token already issued lapses within 15 minutes. 404 CONNECTED_APP_GRANT_NOT_FOUND for anything that is not one of the person's live grants to a third-party app. Takes the same token as `GET /me/grants`.

Path parameters

grantIdstringRequired
A grant id from the list.

Headers

Idempotency-KeystringOptional
Makes the write safe to retry. The first request with a key does the work and its response is stored for 24 hours; a repeat with the same key and the same request (method, path, query, X-Ticketlayer-Channel, TL-Version and body) gets that stored status and body back, marked `Idempotent-Replay: true`, without running again. The key is scoped to your organisation and your credential. The same key with a different request is 422 IDEMPOTENCY_KEY_REUSED; a repeat while the first is still running waits for it, then answers 409 IDEMPOTENT_REQUEST_IN_PROGRESS if it has not finished. Only a 2xx is stored: after an error the key is free again. Omit the header and the request behaves as it always has.

Returns

Revoked

Errors

400
Bad Request - Invalid input
401
Unauthorized - Authentication required
403
Forbidden - Insufficient permissions
404
Not Found - Resource not found
500
Internal Server Error

Every error names its code and links to it. All error codes

curl -X DELETE "https://api.ticketlayer.com/v1/me/grants/{grantId}" \  -H "Authorization: Bearer tlak_..." \  -H "X-Ticketlayer-Org: your-org-slug"
Response 200
{
  "revoked": true
}

Try it in test mode

Path parameters
A grant id from the list.