feat: add RevokeToken

adhocore · adhocore · commit b8f36789da75 · 2021-10-16T08:32:20.000+07:00
diff --git a/goic.go b/goic.go
@@ -459,6 +459,55 @@ func (g *Goic) SignOut(tok *Token, redir string, res http.ResponseWriter, req *h
 	return nil
 }
 
+// RevokeToken revokes a Token so that it is no longer usable
+func (g *Goic) RevokeToken(tok *Token) error {
+	p, ok := g.providers[tok.Provider]
+	if !ok || !p.CanRevoke() {
+		return ErrProviderSupport
+	}
+
+	tk, hint := tok.AccessToken, "access_token"
+	if tk == "" && tok.RefreshToken != "" {
+		tk, hint = tok.RefreshToken, "refresh_token"
+	}
+	if tk == "" {
+		return ErrTokenAccessKey
+	}
+
+	qry := url.Values{}
+	qry.Add("token", tk)
+	qry.Add("token_type_hint", hint)
+
+	req, err := http.NewRequest("POST", p.wellKnown.RevokeURI, strings.NewReader(qry.Encode()))
+	if err != nil {
+		return err
+	}
+
+	req.Header.Set("Content-Type", "application/x-www-form-urlencoded")
+	req.Header.Set("Authorization", p.AuthBasicHeader())
+	res, err := http.DefaultClient.Do(req)
+	if err != nil {
+		return err
+	}
+	defer res.Body.Close()
+
+	body, err := ioutil.ReadAll(res.Body)
+	if err != nil {
+		return err
+	}
+
+	var revoke map[string]interface{}
+	if err := json.Unmarshal(body, &revoke); err != nil {
+		return err
+	}
+	if e, ok := revoke["error"].(map[string]string); ok {
+		if msg, ok := e["message"]; ok {
+			return errors.New(msg)
+		}
+	}
+	return nil
+}
+
 // logIf logs if verbose is set
 func (g *Goic) logIf(s string, v ...interface{}) {
 	if g.verbose {
