Hello,
I’m using Fosite as my company’s Authorization Server and implemented our own sql storage. Everything works fine but the revoke token.
I’ve tried using access_token and refresh_token as hint and passing the corresponding token as well without luck.
I have to mention that this is also failing in the fosite-example repo.
This is what the request looks like:
Client is public and I’m also sending the authorization header:
authHash := base64.StdEncoding.EncodeToString(
[]byte(fmt.Sprintf("%s:%s", oAuth2Config.ClientID, "")),
)
r.Header.Set("Authorization", "Basic "+authHash)
Payload
POST request with "application/x-www-form-urlencoded" Content-Type header
token=valid-existing-non-revoked-access-token-or-refresh-token
token_type_hint=tried-with-access-and-refresh-tokens-same-result
Response
{"error":"invalid_request","error_description":"The request is missing a required parameter, includes an invalid parameter value, includes a parameter more than once, or is otherwise malformed","error_hint":"Make sure that the various parameters are correct, be aware of case sensitivity and trim your parameters. Make sure that the client you are using has exactly whitelisted the redirect_uri you specified.","status_code":400}
Any idea of what I’m missing or doing wrong @hackerman ?