(Android™) Microsoft Graph Revoke OAuth2 Access Tokens

Invalidates all the refresh tokens issued to applications for a user (as well as session cookies in a user's browser), by resetting the signInSessionsValidFromDateTime user property to the current date-time. Typically, this operation is performed (by the user or an administrator) if the user has a lost or stolen device. This operation prevents access to the organization's data through applications on the device by requiring the user to sign in again to all applications that they have previously consented to, independent of device.

For more information, see https://docs.microsoft.com/en-us/graph/api/user-revokesigninsessions?view=graph-rest-1.0&tabs=http

Chilkat Android™ Downloads Android™ Java Libraries Android C/C++ Libraries

// Important: Don't forget to include the call to System.loadLibrary
// as shown at the bottom of this code sample.
package com.test;

import android.app.Activity;
import com.chilkatsoft.*;

import android.widget.TextView;
import android.os.Bundle;

public class SimpleActivity extends Activity {

  private static final String TAG = "Chilkat";

  // Called when the activity is first created.
  @Override
  public void onCreate(Bundle savedInstanceState) {
    super.onCreate(savedInstanceState);

    // This example requires the Chilkat API to have been previously unlocked.
    // See Global Unlock Sample for sample code.

    // Send a POST as shown below to invalidate all the refresh tokens issued to applications for a user (as well as session cookies in a user's browser),
    // 

    // 	POST /v1.0/me/revokeSignInSessions HTTP/1.1
    // 	Host: graph.microsoft.com
    //      Authorization: Bearer ACCESS_TOKEN
    // 	Content-Type: application/json
    // 	Content-Length: 0
    // 
    // or specify a specific user:
    // 
    // 	POST /v1.0/users/{id | userPrincipalName}/revokeSignInSessions HTTP/1.1
    // 	Host: graph.microsoft.com
    //      Authorization: Bearer ACCESS_TOKEN
    // 	Content-Type: application/json
    // 	Content-Length: 0

    CkHttp http = new CkHttp();

    // Set the http.AuthToken property to automatically add the "Authorization: Bearer ACCESS_TOKEN" header
    http.put_AuthToken("ACCESS_TOKEN");

    // Send an empty JSON request body.
    CkHttpResponse resp = http.PostJson("https://graph.microsoft.com/v1.0/me/revokeSignInSessions","");
    if (http.get_LastMethodSuccess() != true) {
        Log.i(TAG, http.lastErrorText());
        return;
        }

    // A response code of 204 is success
    if (resp.get_StatusCode() == 204) {
        Log.i(TAG, "Success.");

        return;
        }

    // We have an error...

    // Load the JSON response.
    CkJsonObject json = new CkJsonObject();
    json.Load(resp.bodyStr());
    json.put_EmitCompact(false);

    // Show the JSON response.
    Log.i(TAG, json.emit());

    Log.i(TAG, "Response status code: " + String.valueOf(resp.get_StatusCode()));


  }

  static {
      System.loadLibrary("chilkat");

      // Note: If the incorrect library name is passed to System.loadLibrary,
      // then you will see the following error message at application startup:
      //"The application <your-application-name> has stopped unexpectedly. Please try again."
  }
}