oauth2server: token revocation endpoint

[jirikuncar]

@lnielsen commented on Tue Aug 19 2014

Flask-OAuthlib v0.7 (soon to be release) has added support for token revocation. This can rather easily be added to the current implementation.

• Add revoke endpoint (lepture/flask-oauthlib@e012655)
• Add tests

[slint]

Are there any updates on this? Considering that the .revoke_token endpoint name is used, currently the settings view if a user has Authorized Applications is kind of broken.

[krzysztof]

@slint It seems that the rendering now doesn't crash (both master of this repo as well as zenodo sandbox).

I can also revoke token using our endpoint - I guess this is complete w.r.t. functionality?

[slint]

The endpoint that was introduced with e728a25 is not the OAuth2 spec implementation that is mentioned in this issue and provided by Flask-OAuthlib. There's still a need to implemented this in invenio_oauth2server.views.server.

(My comment was wrongly placed in this issue, since it's about the "internally" revoking Authorized Application tokens)