Revoking access

From time to time a client may wish to revoke access to your application, or for whatever reason, you may need the client to revoke access & re-connect to get fresh tokens.

MYOB has a secure server where any client can login and see the list of files that are authenticated against their account. To reach this site, simply visit the URL below and login.

https://secure.myob.com/

Once there and logged in the user will see a screen like this.

Clicking the Revoke Access button will instantly terminate any existing access_tokens and refresh_tokens.

If you try to refresh the tokens with a revoked token you will get this message.

{
 "error": "invalid_grant"
}

The message is a little generic because the authentication server is actually expecting you to be sending grant type of authorization_code because as far as it knows, there are no tokens to refresh.