Add Revoke Refresh Token endpoint

auth0/v3/authentication/revoke_token.py

@@ -0,0 +1,37 @@
+from .base import AuthenticationBase
+
+
+class RevokeToken(AuthenticationBase):
+
+    """Revoke Refresh Token endpoint
+
+    Args:
+        domain (str): Your auth0 domain (e.g: username.auth0.com)
+    """
+
+    def revoke_refresh_token(self, client_id, token, client_secret=None):
+        """Revokes a Refresh Token if it has been compromised
+
+           Each revocation request invalidates not only the specific token, but all other tokens 
+           based on the same authorization grant. This means that all Refresh Tokens that have 
+           been issued for the same user, application, and audience will be revoked.
+
+           Args:
+                client_id (str): The Client ID for your Application
+
+                token (str): The Refresh Token you want to revoke
+
+                client_secret (str, optional): The Client Secret for your Application.
+                        Required for confidential applications.
+                        See: https://auth0.com/docs/applications/application-types#confidential-applications
+
+            See: https://auth0.com/docs/api/authentication#refresh-token
+        """
+        body = {
+            'client_id': client_id,
+            'token': token,
+            'client_secret': client_secret
+        }
+
+        return self.post(
+            'https://{}/oauth/revoke'.format(self.domain), data=body)

auth0/v3/test/authentication/test_revoke_token.py

@@ -0,0 +1,38 @@
+import unittest
+import mock
+from ...authentication.revoke_token import RevokeToken
+
+
+class TestRevokeToken(unittest.TestCase):
+
+    @mock.patch('auth0.v3.authentication.revoke_token.RevokeToken.post')
+    def test_revoke_refresh_token(self, mock_post):
+
+        a = RevokeToken('my.domain.com')
+
+        # regular apps
+        a.revoke_refresh_token(client_id='cid',
+                    token='tkn')
+
+        args, kwargs = mock_post.call_args
+
+        self.assertEqual(args[0], 'https://my.domain.com/oauth/revoke')
+        self.assertEqual(kwargs['data'], {
+            'client_id': 'cid',
+            'token': 'tkn',
+            'client_secret': None
+        })
+
+        # confidential apps
+        a.revoke_refresh_token(client_id='cid',
+                    token='tkn',
+                    client_secret='sh!')
+
+        args, kwargs = mock_post.call_args
+
+        self.assertEqual(args[0], 'https://my.domain.com/oauth/revoke')
+        self.assertEqual(kwargs['data'], {
+            'client_id': 'cid',
+            'token': 'tkn',
+            'client_secret': 'sh!'
+        })