+ P(iKX^RIHt^RIHt^RIHt^RIHt^RIHt!RR]4tR#) )default_json_headers)InvalidGrantError)InvalidRequestError) TokenEndpoint)UnsupportedTokenTypeErrorcFa]tRt^ toRtRtRtRtRtRt Rt Rt Vt R #) RevocationEndpointzzImplementation of revocation endpoint which is described in `RFC7009`_. .. _RFC7009: https://tools.ietf.org/html/rfc7009 revocationc VPW4VPVPR,VPPR44pV'd"VP V4'g \ 4hV#)aEThe client constructs the request by including the following parameters using the "application/x-www-form-urlencoded" format in the HTTP request entity-body: token REQUIRED. The token that the client wants to get revoked. token_type_hint OPTIONAL. A hint about the type of the token submitted for revocation. tokentoken_type_hint) check_params query_tokenformget check_clientrselfrequestclientr s&&& g/Users/agent/.openclaw/workspace/venv/lib/python3.14/site-packages/authlib/oauth2/rfc7009/revocation.pyauthenticate_token%RevocationEndpoint.authenticate_tokensc '*  LL !7<<#3#34E#F  ++F33#% % cRVP9d \4hVPPR4pV'dW0P9d \ 4hR#R#)r r N)rrrSUPPORTED_TOKEN_TYPESr)rrrhints&&& rrRevocationEndpoint.check_params'sJ ',, &%' '|| 12 D : ::+- -;4rc VPV4pVPW4pV'd0VPW14VPP RVVR7^/\ 3#)aValidate revocation request and create the response for revocation. For example, a client may request the revocation of a refresh token with the following request:: POST /revoke HTTP/1.1 Host: server.example.com Content-Type: application/x-www-form-urlencoded Authorization: Basic czZCaGRSa3F0MzpnWDFmQmF0M2JW token=45ghiukldjahdnhzdauz&token_type_hint=refresh_token :returns: (status_code, body, headers) after_revoke_token)r r)authenticate_endpoint_clientr revoke_tokenserver send_signalrrs&& rcreate_endpoint_response+RevocationEndpoint.create_endpoint_response/si227;''8    e - KK # #$ $  B,,,rc \4h)aGet the token from database/storage by the given token string. Developers should implement this method:: def query_token(self, token_string, token_type_hint): if token_type_hint == 'access_token': return Token.query_by_access_token(token_string) if token_type_hint == 'refresh_token': return Token.query_by_refresh_token(token_string) return Token.query_by_access_token(token_string) or Token.query_by_refresh_token(token_string) NotImplementedError)r token_stringr s&&&rrRevocationEndpoint.query_tokenNs "##rc \4h)abMark token as revoked. Since token MUST be unique, it would be dangerous to delete it. Consider this situation: 1. Jane obtained a token XYZ 2. Jane revoked (deleted) token XYZ 3. Bob generated a new token XYZ 4. Jane can use XYZ to access Bob's resource It would be secure to mark a token as revoked:: def revoke_token(self, token, request): hint = request.form.get("token_type_hint") if hint == "access_token": token.access_token_revoked = True else: token.access_token_revoked = True token.refresh_token_revoked = True token.save() r()rr rs&&&rr"RevocationEndpoint.revoke_token\s ("##rN) __name__ __module__ __qualname____firstlineno____doc__ ENDPOINT_NAMErrr%rr"__static_attributes____classdictcell__) __classdict__s@rr r s/!M(.-> $$$rr N)authlib.constsrrfc6749rrrrr r.rrr:s"/')#/g$g$r