Revoke access token by App takes care of refresh tokens ?

[madhans]

http://docs.apigee.com/management/apis/post/organizations/%7Borg_name%7D/oauth2/revoke

When revoking access tokens the associated refresh tokens seem to be revoked too, but need a confirmation to update @docs

[willwitman · Accepted solution]

@Madhan Sadasivam

I added a note to the API doc you mentioned stating that when an access token is revoked, its refresh token becomes unusable (revoked, essentially). This is explained in more detail here in a note under the "cascade" element. Is this what you're seeing? (See also APIRT-1390).

[madhans]

Thanks @wwitman. To reiterate for any future viewers, the API does not provide a cascade option and behaves as if cascade=true always.