diff --git a/en/docs/administer/key-managers/configure-wso2is-connector.md b/en/docs/administer/key-managers/configure-wso2is-connector.md index fa74ee94a5..38ec8f0250 100644 --- a/en/docs/administer/key-managers/configure-wso2is-connector.md +++ b/en/docs/administer/key-managers/configure-wso2is-connector.md @@ -189,7 +189,7 @@ Follow the steps given below to configure WSO2 IS as a Key Manager component: Revoke Endpoint The endpoint that revokes the access tokens.
- e.g., https://localhost:9444/oauth2/revoke + e.g., https://localhost:9444/oauth2/revoke Optional diff --git a/en/docs/design/api-security/oauth2/grant-types/refresh-token-grant.md b/en/docs/design/api-security/oauth2/grant-types/refresh-token-grant.md index 80ee00af2a..cf035e4a18 100644 --- a/en/docs/design/api-security/oauth2/grant-types/refresh-token-grant.md +++ b/en/docs/design/api-security/oauth2/grant-types/refresh-token-grant.md @@ -26,7 +26,7 @@ The diagram below illustrates the refresh token grant flow. To use this grant type, you need a refresh token, using which you can get a new access token and a refresh token. This can be done by issuing a REST call to the Token API through a REST client like cURL, with the following parameters: -- The Token API URL is [https://localhost:9443/oauth2/token](https://localhost:9443/oauth2/login) , assuming that both the client and the Gateway are running on the same server. +- The Token API URL is [https://localhost:9443/oauth2/token](https://localhost:9443/oauth2/token) , assuming that both the client and the Gateway are running on the same server. - payload ``` "grant_type=refresh_token&refresh_token=" @@ -43,23 +43,23 @@ For example, the following cURL command can be used to access the Token API. === "Format" ``` java - curl -k -d "grant_type=refresh_token&refresh_token=" -H "Authorization: Basic SVpzSWk2SERiQjVlOFZLZFpBblVpX2ZaM2Y4YTpHbTBiSjZvV1Y4ZkM1T1FMTGxDNmpzbEFDVzhh" -H "Content-Type: application/x-www-form-urlencoded" https://localhost:9443/oauth2/token + curl -k -d "grant_type=refresh_token&refresh_token=" -H "Authorization: Basic " -H "Content-Type: application/x-www-form-urlencoded" https://localhost:9443/oauth2/token ``` === "Example" ``` java - curl -k -d "grant_type=refresh_token&refresh_token=3154090c-37f1-3268-90f9-8bd84daf135c" -H "Authorization: Basic UXk3RUZfVEtMbEVLWTlVRFpiWHVscVA4ZVVBYTpKSWN3VTlIX1hGUFdTcW1RQmllZ3lJUzRKazhh" -H "Content-Type: application/x-www-form-urlencoded" https://localhost:9443/oauth2/token + curl -k -d "grant_type=refresh_token&refresh_token=bd63be3d-d37e-3689-9488-b9dbbe8d3f9e" -H "Authorization: Basic dTJRMGpDb2RhWklnRlZoZkxUY3VSNHJCX05ZYTpCWkVmaUZBd043NkJDUUxKTjFTcW5YaGxVcm9h" -H "Content-Type: application/x-www-form-urlencoded" https://localhost:9443/oauth2/token ``` You receive a response similar to the following: -``` java +``` json { - "scope":"default", - "token_type":"Bearer", - "expires_in":3600, - "refresh_token":"7ed6bae2b1d36c041787e8c8e2d6cbf8", - "access_token":"b7882d23f1f8257f4bc6cf4a20633ab1" + "access_token":"eyJ4NXQiOiJPREJtTVRVMFpqSmpPREprTkdZMVpUaG1ZamsyWVRZek56UmpZekl6TVRCbFlqRTBNV0prWTJJeE5qZzNPRGRqWVdRNVpXWmhOV0kwTkRBM1pqTTROUSIsImtpZCI6Ik9EQm1NVFUwWmpKak9ESmtOR1kxWlRobVlqazJZVFl6TnpSall6SXpNVEJsWWpFME1XSmtZMkl4TmpnM09EZGpZV1E1WldaaE5XSTBOREEzWmpNNE5RX1JTMjU2IiwidHlwIjoiYXQrand0IiwiYWxnIjoiUlMyNTYifQ.eyJzdWIiOiI5Zjg1MGViNi04NGQ0LTQwZDItYmRhNi04ZWJmYWI2YTUxMWIiLCJhdXQiOiJBUFBMSUNBVElPTl9VU0VSIiwiYXVkIjoidTJRMGpDb2RhWklnRlZoZkxUY3VSNHJCX05ZYSIsIm5iZiI6MTcxMzE2Mjc4NCwiYXpwIjoidTJRMGpDb2RhWklnRlZoZkxUY3VSNHJCX05ZYSIsInNjb3BlIjoiZGVmYXVsdCIsImlzcyI6Imh0dHBzOi8vbG9jYWxob3N0Ojk1MDAvb2F1dGgyL3Rva2VuIiwiZXhwIjoxNzEzMTY2Mzg0LCJpYXQiOjE3MTMxNjI3ODQsImp0aSI6IjgzNTc2NDEwLTA4NGItNDg4Mi1hZGZlLTYyYjM4M2VjZWI0NCIsImNsaWVudF9pZCI6InUyUTBqQ29kYVpJZ0ZWaGZMVGN1UjRyQl9OWWEifQ.vg_YgUfGWqy6z_LFfJAv0MZtRax09b9MHtA-RA4OKkUISnqcgJiqcP7X4K2NE0sLiL7v3mihBS-gLRb6lH7L2b4nCWwAVD0XR3PVviEBfzeGgse2QTbx_kc7gP10UfqrqBg0-Cj4SHW4XXGXcHytg6n-txJmZwtPNnA3RZSPcIIJbna3iPtfndqLbAJntP45vL-ug_tUKfuW6pKlKcU5yTkEfeajNCr1miRcg4jEfG_fG_iVTYXo9hdR5yeW8l5iU4bDrd9M9UKXpyCsfszlGEBK71qCm2mq2HZOOxn1Cpx2JE6ekfVF85Y_amB-56wsh8HXj22FaZCgU-bCgpmWzw", + "refresh_token":"af018b89-8cda-3a01-8c48-c10eff0d1cef", + "scope":"default", + "token_type":"Bearer", + "expires_in":3600 } ``` @@ -89,31 +89,33 @@ The parameters required to invoke the following API are as follows: === "Example" ``` java - curl -k -v -d "token=c8e8eec2-0092-3ac6-b23f-ef7492f345a6" -H "Authorization: Basic OVRRNVJLZWFhVGZGeUpRSkRzam9aZmp4UkhjYTpDZnJ3ZXRual9ZOTdSSzFTZWlWQWx1aXdVVmth" -H "Content-Type: application/x-www-form-urlencoded" https://localhost:9443/oauth2/revoke + curl -k -v -d "token=af018b89-8cda-3a01-8c48-c10eff0d1cef" -H "Authorization: Basic dTJRMGpDb2RhWklnRlZoZkxUY3VSNHJCX05ZYTpCWkVmaUZBd043NkJDUUxKTjFTcW5YaGxVcm9h" -H "Content-Type: application/x-www-form-urlencoded" https://localhost:9443/oauth2/revoke ``` **Response** ``` - > Host: localhost:8243 - > User-Agent: curl/7.50.2 - > Accept: */* - > Authorization: Basic YjNtTzdkQ2h3UHBfdTVHOFN6cVBzSDVTRnZRYTo4OG16bGFaejc2T2RlekJSNDBwcmZBa2ZNUjBh - > Content-Type: application/x-www-form-urlencoded - > Content-Length: 42 - > - < HTTP/1.1 200 OK - < X-Frame-Options: DENY - < RevokedRefreshToken: c8e8eec2-0092-3ac6-b23f-ef7492f345a6 - < Cache-Control: no-store - < X-Content-Type-Options: nosniff - < AuthorizedUser: admin@carbon.super - < Pragma: no-cache - < RevokedAccessToken: c7febbd3-5f35-3727-ae5f-5a8492b04f93 - < X-XSS-Protection: 1; mode=block - < Content-Type: text/html - < Date: Thu, 02 Nov 2017 12:57:58 GMT - < Transfer-Encoding: chunked +> POST /oauth2/revoke HTTP/1.1 +> Host: localhost:9443 +> User-Agent: curl/8.4.0 +> Accept: */* +> Authorization: Basic dTJRMGpDb2RhWklnRlZoZkxUY3VSNHJCX05ZYTpCWkVmaUZBd043NkJDUUxKTjFTcW5YaGxVcm9h +> Content-Length: 42 +> Content-Type: application/x-www-form-urlencoded +> +< HTTP/1.1 200 +< X-WSO2-TraceId: e74786fd-f680-4ae3-b8fe-e1df5aa904a4 +< X-Frame-Options: DENY +< X-Content-Type-Options: nosniff +< Cache-Control: no-store +< Pragma: no-cache +< RevokedAccessToken: 83576410-084b-4882-adfe-62b383eceb44 +< RevokedRefreshToken: af018b89-8cda-3a01-8c48-c10eff0d1cef +< AuthorizedUser: admin@carbon.super +< Date: Mon, 15 Apr 2024 07:26:42 GMT +< Content-Type: application/json +< Content-Length: 0 +< Server: WSO2 Carbon Server ``` #### Option 2 @@ -124,7 +126,7 @@ The parameters required to invoke the following API are as follows: - `base64Encode(clientId:clientSecret)` - Use a base64 encoder to encode your client ID and client secret in the format: `:`. WSO2 does not recommend the use of online base64 encoders for this purpose. -- `token_type_hint -` This parameter is **optional**. If you do not specify this parameter, then WSO2 API Manager will search in both key spaces (access token and refresh token) and if it finds a matching token then it will be revoked. Therefore, if this parameter it not specified the token revocation process takes longer. However, if you specify this parameter then it will only searches in the respective token key space, hence the token revocation process is much faster. +- `token_type_hint -` This parameter is **optional**. If you do not specify this parameter, then WSO2 API Manager will search in both key spaces (access token and refresh token) and if it finds a matching token then it will be revoked. Therefore, if this parameter is not specified the token revocation process takes longer. However, if you specify this parameter then it will only search in the respective token key space, hence the token revocation process is much faster. === "Format" ``` java @@ -133,32 +135,33 @@ The parameters required to invoke the following API are as follows: === "Example" ``` java - curl -k -v -d "token=4ed29669-a457-3f83-af1e-180cad271cca&token_type_hint=refresh_token" -H "Authorization: Basic OVRRNVJLZWFhVGZGeUpRSkRzam9aZmp4UkhjYTpDZnJ3ZXRual9ZOTdSSzFTZWlWQWx1aXdVVmth" -H "Content-Type: application/x-www-form-urlencoded" https://localhost:9443/oauth2/revoke + curl -k -v -d "token=b6b5db36-9c1e-31dc-a3c2-283377736dd0&token_type_hint=refresh_token" -H "Authorization: Basic dTJRMGpDb2RhWklnRlZoZkxUY3VSNHJCX05ZYTpCWkVmaUZBd043NkJDUUxKTjFTcW5YaGxVcm9h" -H "Content-Type: application/x-www-form-urlencoded" https://localhost:9443/oauth2/revoke ``` **Response** ``` - > POST /revoke HTTP/1.1 - > Host: localhost:8243 - > User-Agent: curl/7.50.2 - > Accept: */* - > Authorization: Basic YjNtTzdkQ2h3UHBfdTVHOFN6cVBzSDVTRnZRYTo4OG16bGFaejc2T2RlekJSNDBwcmZBa2ZNUjBh - > Content-Type: application/x-www-form-urlencoded - > Content-Length: 72 - > - < HTTP/1.1 200 OK - < X-Frame-Options: DENY - < RevokedRefreshToken: 4ed29669-a457-3f83-af1e-180cad271cca - < Cache-Control: no-store - < X-Content-Type-Options: nosniff - < AuthorizedUser: admin@carbon.super - < Pragma: no-cache - < RevokedAccessToken: 23562997-bbc7-353f-a650-16558b7147bc - < X-XSS-Protection: 1; mode=block - < Content-Type: text/html - < Date: Thu, 02 Nov 2017 12:59:41 GMT - < Transfer-Encoding: chunked +> POST /oauth2/revoke HTTP/1.1 +> Host: localhost:9443 +> User-Agent: curl/8.4.0 +> Accept: */* +> Authorization: Basic dTJRMGpDb2RhWklnRlZoZkxUY3VSNHJCX05ZYTpCWkVmaUZBd043NkJDUUxKTjFTcW5YaGxVcm9h +> Content-Length: 72 +> Content-Type: application/x-www-form-urlencoded +> +< HTTP/1.1 200 +< X-WSO2-TraceId: b29c94ad-6d1c-435a-9423-f8a7ae2d8ddd +< X-Frame-Options: DENY +< X-Content-Type-Options: nosniff +< Cache-Control: no-store +< Pragma: no-cache +< RevokedAccessToken: c120a072-b5a6-4dc7-9889-dda037011917 +< RevokedRefreshToken: b6b5db36-9c1e-31dc-a3c2-283377736dd0 +< AuthorizedUser: admin@carbon.super +< Date: Mon, 15 Apr 2024 07:33:41 GMT +< Content-Type: application/json +< Content-Length: 0 +< Server: WSO2 Carbon Server ``` !!! tip diff --git a/en/docs/design/api-security/oauth2/token-revocation.md b/en/docs/design/api-security/oauth2/token-revocation.md index 63a69ff34f..a6d2b9d9dd 100644 --- a/en/docs/design/api-security/oauth2/token-revocation.md +++ b/en/docs/design/api-security/oauth2/token-revocation.md @@ -2,7 +2,7 @@ ## Revoking access tokens -After issuing an access token, a user or an admin can revoke it in case of theft or a security violation. You can do this by calling the Revoke API using a utility like cURL. The Revoke API's endpoint URL is `http://localhost:8280/revoke`. +After issuing an access token, a user or an admin can revoke it in case of theft or a security violation. You can do this by calling the Revoke API using a utility like cURL. The Revoke API's endpoint URL is `https://localhost:9443/oauth2/revoke`. !!! note You can also revoke refresh tokens. For more information, see [Revoking a refresh token]({{base_path}}/design/api-security/oauth2/grant-types/refresh-token-grant/#revoking-a-refresh-token). @@ -61,11 +61,3 @@ The parameters required to invoke the following API are as follows: Transfer-Encoding: chunked ``` - -!!! note "Revoking access tokens obtained with a JWT grant" - - If you obtained an access token with the JWT grant type, you do not have to provide the client secret to revoke it. The sample cURL command to revoke an access token with JWT grant is given below. - - ``` java - curl -X POST -H "Content-Type: application/x-www-form-urlencoded;charset=UTF-8" -d "token=&token_type_hint=access_token&client_id=" http://localhost:8243/revoke - ``` diff --git a/en/docs/reference/config-catalog.md b/en/docs/reference/config-catalog.md index bef830d699..7914831e52 100644 --- a/en/docs/reference/config-catalog.md +++ b/en/docs/reference/config-catalog.md @@ -2812,7 +2812,7 @@ key_validation_handler_impl = "org.wso2.carbon.apimgt.keymgt.handlers.DefaultKey 
[apim.oauth_config]
 enable_outbound_auth_header = false
 auth_header = "Authorization"
-revoke_endpoint = "https://localhost:${https.nio.port}/revoke"
+revoke_endpoint = "https://localhost:${mgt.transport.https.port}/oauth2/revoke"
 enable_token_encryption = false
 enable_token_hashing = false
@@ -2878,7 +2878,7 @@ enable_token_hashing = false

- Default: https://localhost:8243/revoke + Default: https://localhost:9443/oauth2/revoke
Possible Values: Valid URL for revocation endpoint. @@ -5130,7 +5130,7 @@ log_tracer.enable = true 
[apim.token.revocation]
-notifier_impl = "org.wso2.carbon.apimgt.keymgt.events.TokenRevocationNotifierImpl"
+notifier_impl = "org.wso2.carbon.apimgt.notification.TokenRevocationNotifierImpl"
 enable_realtime_notifier = true
 realtime_notifier.ttl = 5000
 enable_persistent_notifier = true
@@ -5161,7 +5161,7 @@ persistent_notifier.password = "root"

- Default: org.wso2.carbon.apimgt.notification.TokenRevocationNotifier + Default: org.wso2.carbon.apimgt.notification.TokenRevocationNotifierImpl
@@ -5463,8 +5463,8 @@ event_duplicate_url = ["tcp://control-plane-2-host:5672"]
- - + + 
[[apim.event_hub.publish.url_group]]
@@ -5544,8 +5544,8 @@ auth_urls = ["ssl://control-plane-2-host:9711"]
         

             

             
-            
-                
+            
+                
                 

                     

 
[apim.notification]
@@ -5739,8 +5739,8 @@ enable_authentication = true

         

             

             
-            
-                
+            
+                
                 

                     

 
[tenant_mgt]
@@ -5795,8 +5795,8 @@ enable_email_domain = true

         

             

             
-            
-                
+            
+                
                 

                     

 
[output_adapter.email]
@@ -5991,8 +5991,8 @@ enable_authentication = true

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.stratos]
@@ -6245,8 +6245,8 @@ sso_loading_message = "Loading..."

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.stratos.paypal]
@@ -6379,8 +6379,8 @@ environment = "live"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.stratos.manager_service]
@@ -6473,8 +6473,8 @@ admin_password = "admin"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.usage_agent.data_persistence_task]
@@ -6569,8 +6569,8 @@ execution_interval_in_ms = "-1"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.throttling_manager_tasks]
@@ -6626,8 +6626,8 @@ data_providers = [
         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.throttling_manager_tasks.parameters]
@@ -6702,8 +6702,8 @@ delay = "60"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.cloud_services]
@@ -6858,8 +6858,8 @@ description = "API Manager in the cloud"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.demo]
@@ -6932,8 +6932,8 @@ subscription_charge = 0

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.demo.users]
@@ -7006,8 +7006,8 @@ charge= "0"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.demo.resource_volume]
@@ -7080,8 +7080,8 @@ overuse_charge= "0"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.demo.bandwidth]
@@ -7154,8 +7154,8 @@ overuse_charge= "0"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.smb]
@@ -7228,8 +7228,8 @@ subscription_charge = "100"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.smb.users]
@@ -7302,8 +7302,8 @@ charge= "0"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.smb.resource_volume]
@@ -7376,8 +7376,8 @@ overuse_charge= "0"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.smb.bandwidth]
@@ -7450,8 +7450,8 @@ overuse_charge= "0"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.custom]
@@ -7524,8 +7524,8 @@ subscription_charge = "500"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.custom.users]
@@ -7598,8 +7598,8 @@ charge= "0"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.custom.resource_volume]
@@ -7672,8 +7672,8 @@ overuse_charge = "0.03"

         

             

             
-            
-                
+            
+                
                 

                     

 
[multi_tenancy.billing.package.custom.bandwidth]
@@ -7748,8 +7748,8 @@ overuse_charge= "0"

         

             

             
-            
-                
+            
+                
                 

                     

 
[indexing]
@@ -7906,8 +7906,8 @@ re_indexing = 1

         

             

             
-            
-                
+            
+                
                 

                     

 
[transport.http.properties]
@@ -8316,8 +8316,8 @@ URIEncoding = "UTF-8"

         

             

             
-            
-                
+            
+                
                 

                     

 
[transport.https.properties]
@@ -8814,8 +8814,8 @@ SSLEnabled = "true"

         

             

             
-            
-                
+            
+                
                 

                     

 
[transport.passthru_https]
@@ -9543,8 +9543,8 @@ sender.ssl_profile.interval = "600000"

         

             

             
-            
-                
+            
+                
                 

                     

 
[transport.passthru_https]
@@ -10001,8 +10001,8 @@ sender.parameters.SO_TIMEOUT = 60000

         

             

             
-            
-                
+            
+                
                 

                     

 
#You can use one of the two options listed below for the configuration
@@ -10180,8 +10180,8 @@ bypass_hosts = ["localhost"]

         

             

             
-            
-                
+            
+                
                 

                     

 
#You can use one of the two options listed below for the configuration
@@ -10360,8 +10360,8 @@ bypass_hosts = ["localhost"]
         

             

             
-            
-                
+            
+                
                 

                     

 
[transport.ws]
@@ -10484,8 +10484,8 @@ sender.parameter.customParameter = ""

         

             

             
-            
-                
+            
+                
                 

                     

 
[transport.wss]
@@ -10652,8 +10652,8 @@ sender.trust_store.password = "$ref{truststore.password}"

         

             

             
-            
-                
+            
+                
                 

                     

 
[message_builders]
@@ -10886,8 +10886,8 @@ application_binary = "org.apache.axis2.format.BinaryBuilder"

         

             

             
-            
-                
+            
+                
                 

                     

 
[blocking.message_builders]
@@ -10931,8 +10931,8 @@ application_binary = "org.apache.axis2.format.BinaryBuilder"

         

             

             
-            
-                
+            
+                
                 

                     

 
[message_formatters]
@@ -11209,8 +11209,8 @@ application_binary =  "org.apache.axis2.format.BinaryFormatter"

         

             

             
-            
-                
+            
+                
                 

                     

 
[blocking.message_formatters]
@@ -11256,8 +11256,8 @@ application_binary =  "org.apache.axis2.format.BinaryFormatter"

         

             

             
-            
-                
+            
+                
                 

                     

 
[[custom_message_builders]]
@@ -11336,8 +11336,8 @@ class = "org.apache.axis2.json.JSONBadgerfishOMBuilder"

         

             

             
-            
-                
+            
+                
                 

                     

 
[[blocking.custom_message_builders]]
@@ -11374,8 +11374,8 @@ class = "org.apache.axis2.json.JSONBadgerfishOMBuilder"

         

             

             
-            
-                
+            
+                
                 

                     

 
[[custom_message_formatters]]
@@ -11454,8 +11454,8 @@ class = "org.apache.axis2.json.JSONBadgerfishMessageFormatter"

         

             

             
-            
-                
+            
+                
                 

                     

 
[[blocking.custom_message_formatters]]
@@ -11492,8 +11492,8 @@ class = "org.apache.axis2.json.JSONBadgerfishMessageFormatter"

         

             

             
-            
-                
+            
+                
                 

                     

 
[mediation]
@@ -11830,8 +11830,8 @@ inbound.max_threads = 100

         

             

             
-            
-                
+            
+                
                 

                     

 
enabled_global_handlers= ["custom_logger"]
@@ -11912,8 +11912,8 @@ custom_logger.class= "com.wso2.apim.log.handler.SynapseLogHandler"
         

             

             
-            
-                
+            
+                
                 

                     

 
[governance]
@@ -11970,8 +11970,8 @@ life_cycle_checklist_items_enabled = true

         

             

             
-            
-                
+            
+                
                 

                     

 
[qpid.heartbeat]
@@ -12046,8 +12046,8 @@ timeout_factor = 3.0

         

             

             
-            
-                
+            
+                
                 

                     

 
[carbon_health_check]
@@ -12102,8 +12102,8 @@ enable = true

         

             

             
-            
-                
+            
+                
                 

                     

 
[carbon_health_check.health_checker.super_tenant_health_checker]
@@ -12178,8 +12178,8 @@ order = "98"

         

             

             
-            
-                
+            
+                
                 

                     

 
[carbon_health_check.health_checker.super_tenant_health_checker.properties]
@@ -12232,8 +12232,8 @@ monitored.user.stores = "primary,sec"

         

             

             
-            
-                
+            
+                
                 

                     

 
[carbon_health_check.health_checker.data_source_health_checker]
@@ -12308,8 +12308,8 @@ order = "97"

         

             

             
-            
-                
+            
+                
                 

                     

 
[carbon_health_check.health_checker.data_source_health_checker.properties]
@@ -12382,8 +12382,8 @@ monitored.datasources = "jdbc/WSO2AM_DB,jdbc/SHARED_DB,jdbc/WSO2CarbonDB"
         

             

             
-            
-                
+            
+                
                 

                     

 
[health_checker]
@@ -12479,8 +12479,8 @@ first_property = "value"

         

             

             
-            
-                
+            
+                
                 

                     

 
[oauth]
@@ -12658,8 +12658,8 @@ token_context_dialect_uri = "http://wso2.org/claims"
         

             

             
-            
-                
+            
+                
                 

                     

 
[oauth.token_validation]
@@ -12753,8 +12753,8 @@ refresh_token_validity = "86400"
         

             

             
-            
-                
+            
+                
                 

                     

 
[oauth.token_cleanup]
@@ -12831,8 +12831,8 @@ retain_access_tokens_for_auditing = true

         

             

             
-            
-                
+            
+                
                 

                     

 
[oauth.oidc.extensions]
@@ -13060,8 +13060,8 @@ enable_unmapped_user_attributes = true
         

             

             
-            
-                
+            
+                
                 

                     

 
[oauth.grant_type.authorization_code]
@@ -13549,8 +13549,8 @@ grant_validator = "org.wso2.carbon.identity.oauth2.grant.kerberos.KerberosGrantV
         

             

             
-            
-                
+            
+                
                 

                     

 
[session_data.persistence]
@@ -13603,8 +13603,8 @@ persistence_pool_size = 0

         

             

             
-            
-                
+            
+                
                 

                     

 
[oauth.token_generation]
@@ -13659,8 +13659,8 @@ retry_count_on_persistence_failures = 5

         

             

             
-            
-                
+            
+                
                 

                     

 
[user_store.properties]
@@ -14488,8 +14488,8 @@ UserCoreCacheTimeOut = 5 

         

             

             
-            
-                
+            
+                
                 

                     

 
[custom_keystore.APIKeyKeyStore]
@@ -14624,8 +14624,8 @@ key_password = "wso2carbon"

         

             

             
-            
-                
+            
+                
                 

                     

 
[http_access_log]
@@ -14682,8 +14682,8 @@ useLogger = true

         

             

             
-            
-                
+            
+                
                 

                     

 
#### Sample deployment.toml entry
diff --git a/en/tools/config-catalog-generator/data/apim.oauth_config.toml b/en/tools/config-catalog-generator/data/apim.oauth_config.toml
index 31e31b4d72..1ba7ba7fb3 100644
--- a/en/tools/config-catalog-generator/data/apim.oauth_config.toml
+++ b/en/tools/config-catalog-generator/data/apim.oauth_config.toml
@@ -1,6 +1,6 @@
 [apim.oauth_config]
 enable_outbound_auth_header = false
 auth_header = "Authorization"
-revoke_endpoint = "https://localhost:${https.nio.port}/revoke"
+revoke_endpoint = "https://localhost:${mgt.transport.https.port}/oauth2/revoke"
 enable_token_encryption = false
 enable_token_hashing = false
\ No newline at end of file
diff --git a/en/tools/config-catalog-generator/data/apim.token.revocation.toml b/en/tools/config-catalog-generator/data/apim.token.revocation.toml
index dd5378ebab..e157c52791 100644
--- a/en/tools/config-catalog-generator/data/apim.token.revocation.toml
+++ b/en/tools/config-catalog-generator/data/apim.token.revocation.toml
@@ -1,5 +1,5 @@
 [apim.token.revocation]
-notifier_impl = "org.wso2.carbon.apimgt.keymgt.events.TokenRevocationNotifierImpl"
+notifier_impl = "org.wso2.carbon.apimgt.notification.TokenRevocationNotifierImpl"
 enable_realtime_notifier = true
 realtime_notifier.ttl = 5000
 enable_persistent_notifier = true
diff --git a/en/tools/config-catalog-generator/data/configs.json b/en/tools/config-catalog-generator/data/configs.json
index 059cd272cf..58b1dc2c19 100755
--- a/en/tools/config-catalog-generator/data/configs.json
+++ b/en/tools/config-catalog-generator/data/configs.json
@@ -1068,7 +1068,7 @@
                             "name": "revoke_endpoint",
                             "type": "string",
                             "required": false,
-                            "default": "https://localhost:8243/revoke",
+                            "default": "https://localhost:9443/oauth2/revoke",
                             "possible": "Valid URL for revocation endpoint.",
                             "description": "Token revocation endpoint used in the API Developer Portal"
                         },
@@ -1939,7 +1939,7 @@
                             "name": "notifier_impl",
                             "type": "string",
                             "required": false,
-                            "default": "org.wso2.carbon.apimgt.notification.TokenRevocationNotifier",
+                            "default": "org.wso2.carbon.apimgt.notification.TokenRevocationNotifierImpl",
                             "possible": "",
                             "description": "This config is required only during a custom implementation. \n\nIf a token is revoked, the notification will be sent to the JMS topic. Write a custom implementation to change this behaviour."
                         },