workers-oauth-provider
workers-oauth-provider copied to clipboard
revokeGrant not implemented in handleTokenRequest?
In the handleMetadataDiscovery the line 'revocation_endpoint: tokenEndpoint' tells all clients that they can send revocation requests to the same URL as the token endpoint.
The main router in the fetch method directs all requests for the tokenEndpoint to the handleTokenRequest function. This is the function that should contain the logic for both issuing tokens and revoking them. However, it completely lacks the revocation part.
It will return an unsupported_grant_type error.
However - I noticed we have a function called revokeGrant within OAuthHelpersImpl
This seems like it would work - however it is missing from handleTokenRequest
Is this an oversight?