Hi, I'm using the log out API( https://localhost:8080/auth/realms/my-realm-name/protocol/openid-connect/... ) and sending all the required parameters i.r refresh_token, client_id and client_secret. The API working properly but the user can still able to use the access_token to access the APIs. How to revoke that access_token? Thanks, Shubham Akodiya _______________________________________________ keycloak-user mailing list keycloak-user(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/keycloak-user