jonnybarnes.uk/app/Http
Repository files (latest commit first)
Filename Latest commit message Latest commit date
Jonny Barnes 9c9a6392c8
Add IndieAuth token revocation endpoint (RFC 7009)
Implements the current IndieAuth spec's dedicated /revocation endpoint
so clients can self-revoke a token (e.g. on user sign-out), rather than
only supporting revocation via the admin side. Always responds 200 per
spec, whether the token was found or not, so callers can't use it to
probe token validity. Skips the legacy action=revoke-on-/token fallback
the spec mentions for older clients, since the only real client here is
already being updated to use the current endpoint.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_014625MfkGZ7GVdbqKme4a8L
2026-08-13 16:13:11 +01:00
..
Controllers Add IndieAuth token revocation endpoint (RFC 7009) 2026-08-13 16:13:11 +01:00
Middleware Add IndieAuth token revocation endpoint (RFC 7009) 2026-08-13 16:13:11 +01:00
Requests Move request parsing into DTOs via fromRequest(), expand update handler 2026-03-13 20:39:50 +00:00
Responses Update Laravel Pint, fix files in codebase 2023-02-16 16:57:06 +00:00