# Deactivate auth token

**URL:** <https://discuss.konghq.com/t/deactivate-auth-token/1316>\
**Category:** Questions\
**Created:** [June 22, 2018, 8:14am UTC](https://discuss.konghq.com/t/deactivate-auth-token/1316 "2018-06-22T08:14:24Z")\
**Posts on this page:** 5\
**Page:** 1

<div class="post-metadata">

**Author:** ![Ritesh\_Jha](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/ritesh_jha/32/1448_2.png) [@Ritesh\_Jha](https://discuss.konghq.com/u/Ritesh_Jha)\
**Post date:** [June 22, 2018, 8:14am UTC](https://discuss.konghq.com/t/deactivate-auth-token/1316/1 "2018-06-22T08:14:24Z")

</div>

How to deactivate a previously issued token using client credential flow?

---

<div class="post-metadata">

**Author:** ![bungle](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/bungle/32/13_2.png) [@bungle](https://discuss.konghq.com/u/bungle)\
**Post date:** [June 22, 2018, 8:16am UTC](https://discuss.konghq.com/t/deactivate-auth-token/1316/2 "2018-06-22T08:16:57Z")

</div>

I assume you are using Kong OAuth 2.0 plugin. So, send `DELETE` request to `/oauth2_tokens/:token_or_id` on Kong Admin API.

---

<div class="post-metadata">

**Author:** ![Ritesh\_Jha](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/ritesh_jha/32/1448_2.png) [@Ritesh\_Jha](https://discuss.konghq.com/u/Ritesh_Jha)\
**Post date:** [June 24, 2018, 3:42am UTC](https://discuss.konghq.com/t/deactivate-auth-token/1316/3 "2018-06-24T03:42:36Z")

</div>

> [@bungle](#):
>
> /oauth2\_tokens/

thanks a lot. I was not able to find in doc. Can u point me doc link for same query ?

---

<div class="post-metadata">

**Author:** ![jeremyjpj0916](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/jeremyjpj0916/32/1388_2.png) [@jeremyjpj0916](https://discuss.konghq.com/u/jeremyjpj0916)\
**Post date:** [June 24, 2018, 8:52pm UTC](https://discuss.konghq.com/t/deactivate-auth-token/1316/4 "2018-06-24T20:52:38Z")

</div>

It does not explicitly talk about it here, certainly a PR to the documentation could be helpful in near future:

[https://docs.konghq.com/plugins/oauth2-authentication/](https://docs.konghq.com/plugins/oauth2-authentication/)

But if you do know how to read code on any plugin Kong has built there is always an api.lua page that details out the uri’s and methods to read/create/modify/delete resources and in this case you can see it here:

[https://github.com/Kong/kong/blob/master/kong/plugins/oauth2/api.lua](https://github.com/Kong/kong/blob/master/kong/plugins/oauth2/api.lua)

Over time when Kong can focus on documentation, full scope clarity can be achieved across all Kong functionality, but they are evolving/improving at a rapid rate right now and documentation can be hard to maintain (although they do their best!).

---

<div class="post-metadata">

**Author:** ![Ritesh\_Jha](https://yyz2.discourse-cdn.com/flex036/user_avatar/discuss.konghq.com/ritesh_jha/32/1448_2.png) [@Ritesh\_Jha](https://discuss.konghq.com/u/Ritesh_Jha)\
**Post date:** [June 25, 2018, 2:05am UTC](https://discuss.konghq.com/t/deactivate-auth-token/1316/5 "2018-06-25T02:05:25Z")

</div>

Ya I didn’t check code. Thanks a lot for tips.