Access tokens and refresh tokens can be revoked using token revocation endpoint.
https://tools.ietf.org/html/rfc7009#section-2.1

Revocation Request

GET /uas/oauth2/revocation

Required parameters

• token

The access token or refresh token to be revoked.

• client_id & client_secret

OAuth Client Identifier and Secret of the resource server

POST https://sso.example.com/uas/oauth2/revocationAuthorization: Basic MTc2MjQxNDM3NDoqKio= Content-Type: application/x-www-form-urlencoded
token=DSJJU6QhquTUsznTDeDq0eVm

Revocation Response

HTTP/1.1 200 OK