Description
The client can obtain tokens (device flow via auth.oauth, client_credentials/refresh_token via auth.token()) but cannot revoke them. campus-cli still raw-calls the revoke endpoint (campus_cli/auth/common.py builds /oauth/revoke); the rest of its device flow moved in-library with #70.
Server surface (campus weekly, campus/auth/routes/oauth.py)
POST /auth/v1/oauth/revoke — body: token (required), client_id (required), token_type_hint (optional)- Returns 200
{} per RFC 7009 regardless of whether the token was active
Suggested client shape
auth.oauth.revoke(token, client_id, token_type_hint=None) on the existing OAuth resource (paths under /auth/v1/oauth/... since PR #70).
Description
The client can obtain tokens (device flow via
auth.oauth,client_credentials/refresh_tokenviaauth.token()) but cannot revoke them. campus-cli still raw-calls the revoke endpoint (campus_cli/auth/common.pybuilds/oauth/revoke); the rest of its device flow moved in-library with #70.Server surface (campus
weekly, campus/auth/routes/oauth.py)POST /auth/v1/oauth/revoke— body:token(required),client_id(required),token_type_hint(optional){}per RFC 7009 regardless of whether the token was activeSuggested client shape
auth.oauth.revoke(token, client_id, token_type_hint=None)on the existingOAuthresource (paths under/auth/v1/oauth/...since PR #70).