Hi,

As discussed offline I have re-factored the fix for above [1].

The following are the names of the headers that come in response.

Refresh grant type response:

"DeactivatedAccessToken"

Revoke endpoint response:

"RevokedAccessToken" and "RevokedRefreshToken"

>From the revocation endpoint both the headers will be available since the
client could revoke using either access token or refresh token and the
corresponding other token should also be revoked.

Please make the necessary changes in the API gateway and test with API
Manager 1.6.0.

[1] https://wso2.org/jira/browse/APIMANAGER-1828

-- 
Thanks & Regards,

*Johann Dilantha Nallathamby*
Senior Software Engineer
Integration Technologies Team
WSO2, Inc.
lean.enterprise.middleware

Mobile - *+94777776950*
Blog - *http://nallaa.wordpress.com <http://nallaa.wordpress.com>*
_______________________________________________
Dev mailing list
[email protected]
http://wso2.org/cgi-bin/mailman/listinfo/dev

Reply via email to