| IRevocationHandler | Defines a contract for handling revocation requests for access or refresh tokens as per OAuth 2.0 Token Revocation specifications. Ensures implementations can securely validate and process such requests to revoke tokens effectively. |
| IRevocationRequestProcessor | Represents the capability to handle token revocation requests. The authorization server invalidates tokens immediately upon revocation, preventing their future use. Depending on the server's policy, revoking a token may also affect related tokens and the underlying authorization grant. If a refresh token is revoked and the server supports revocation of access tokens, associated access tokens should also be invalidated. |
| IRevocationRequestValidator | Represents the capability to validate revocation requests. The authorization server validates client credentials (for confidential clients) and checks if the token was issued to the requesting client. If validation fails, the request is refused, and an error message is provided to the client by the authorization server. |