Skip to navigation

Disconnect an application

Browser-only disconnect requires CSRF cookie/form plus same Origin and fresh active identity/account. Revokes the selected own grant and all its tokens. Other users cannot disconnect it.

Additional request headers:

  • Origin (required): Must match the browser request origin for CSRF validation.

Request

This endpoint expects an object.
csrfstringRequired
grant_idstringRequiredformat: "^[a-f0-9]{32}$"