Revoke a sign-in

# Form-encoded (RFC 7009)
curl -sS -X POST https://app.syntic.ai/oauth/revoke \
  -H "Content-Type: application/x-www-form-urlencoded" \
  --data-urlencode "token=$SYNTIC_REFRESH_TOKEN" \
  --data-urlencode "client_id=syntic-code-cli" \
  --data-urlencode "token_type_hint=refresh_token"
 
# The same call as JSON
curl -sS -X POST https://app.syntic.ai/oauth/revoke \
  -H "Content-Type: application/json" \
  -d "{\"token\": \"$SYNTIC_REFRESH_TOKEN\", \"client_id\": \"syntic-code-cli\", \"token_type_hint\": \"refresh_token\"}"

import requests
 
 
def sign_out(refresh_token: str, client_id: str = "syntic-code-cli") -> None:
    try:
        resp = requests.post(
            "https://app.syntic.ai/oauth/revoke",
            data={  # sent as application/x-www-form-urlencoded
                "token": refresh_token,
                "client_id": client_id,
                "token_type_hint": "refresh_token",
            },
            timeout=15,
        )
        if resp.status_code != 200:
            print(f"revoke failed: {resp.status_code} {resp.json().get('error')}")
    except requests.RequestException as exc:
        print(f"revoke failed: {exc}")
    finally:
        delete_local_tokens()  # always clear the device, even if the call failed

export async function signOut(refreshToken: string, clientId = 'syntic-desktop'): Promise<void> {
  try {
    const res = await fetch('https://app.syntic.ai/oauth/revoke', {
      method: 'POST',
      headers: { 'Content-Type': 'application/json' },
      body: JSON.stringify({
        token: refreshToken,
        client_id: clientId,
        token_type_hint: 'refresh_token',
      }),
    })
    if (!res.ok) {
      const body = await res.json().catch(() => ({}))
      console.warn(`revoke failed: ${res.status} ${body.error ?? ''}`)
    }
  } catch (err) {
    console.warn('revoke failed:', err)
  } finally {
    await deleteLocalTokens() // always clear the device, even if the call failed
  }
}