Revoke refresh token on logout (cherrypicked)
Change-Id: I30504a15e36d60a832d3a9b8fcd8286ff8400464
diff --git a/t/server/mock.pl b/t/server/mock.pl
index f8e6e62..2e14035 100644
--- a/t/server/mock.pl
+++ b/t/server/mock.pl
@@ -452,6 +452,26 @@
}
};
+# Revoke API token
+post '/v1.0/oauth2/revoke' => sub {
+ my $c = shift;
+
+ my $refresh_token = $c->param('token');
+
+ if ($c->param('client_secret') ne 'k414m4r-s3cr3t') {
+ return $c->render(
+ json => {
+ "error_description" => "Invalid client credentials",
+ "error" => "invalid_client"
+ },
+ status => 401
+ );
+ };
+
+ return $c->render(
+ text => ''
+ )
+};
app->start;