How to invalidate a downscoped token generated by SDK?

Hello,

I’m only guessing, as there is no code sample provided, that client used to revoke token was created without setting clientId and clientSecret. If you configure that all should work as expected:

public class DownscopedToken {

  public static void main(String[] args) {

    var api = ... // create your API connection



    List<String> scopes = new ArrayList<String>();

    scopes.add("item_preview");

    var downscopedToken = api.getLowerScopedToken(scopes, "https://api.box.com/2.0/folders/0");



    // is you just use new BoxAPIConnection(downscopedToken.getAccessToken()) this will fails with `invalid_request - The client is invalid`

    var downscopedApiConnection = new BoxAPIConnection(api.getClientID(), api.getClientSecret(), downscopedToken.getAccessToken(), null);

    downscopedApiConnection.revokeToken();

  // success token is invalid

  }

}