From 797d26eb2c354d89665ecb43fd950bf982ecbdb9 Mon Sep 17 00:00:00 2001 From: Quentin Gliech Date: Wed, 5 Mar 2025 16:32:02 +0100 Subject: [PATCH] Clarify how the token_type_hint parameter is used --- proposals/4254-oauth2-revocation.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/proposals/4254-oauth2-revocation.md b/proposals/4254-oauth2-revocation.md index 56a4402f9..2b26abf31 100644 --- a/proposals/4254-oauth2-revocation.md +++ b/proposals/4254-oauth2-revocation.md @@ -22,7 +22,7 @@ The server must revoke both the access token and refresh token associated with t The request includes: - The `token` parameter containing either the access token or refresh token to revoke -- Optionally, the `token_type_hint` parameter, with either the `access_token` or `refresh_token` value. If provided, the server must use this value to determine which token to revoke +- Optionally, the `token_type_hint` parameter, with either the `access_token` or `refresh_token` value. If provided, the server can use this value to determine the kind of token which was provided in the request - The `client_id` obtained during client registration #### Sample flow