class Doorkeeper::TokensController

def revoke
  # The authorization server, if applicable, first authenticates the client
  # and checks its ownership of the provided token.
  #
  # Doorkeeper does not use the token_type_hint logic described in the
  # RFC 7009 due to the refresh token implementation that is a field in
  # the access token model.
  if authorized?
    revoke_token
    render json: {}, status: 200
  else
    render json: revocation_error_response, status: :forbidden
  end
end