<%
String authReqUrl =
    AuthSubUtil.getRequestUrl(
        callBackLocation,
        "http://spreadsheets.google.com/feeds",
        false,
        true);
%>

<script>
location.replace("<%=authReqUrl%>");
</script>

2. Which was successfully exchanged for a session token thro

SessionAuthToken =
    AuthSubUtil.exchangeForSessionToken(
    initialToken, null);

3. Then I tried revoking the session token by
AuthSubUtil.revokeToken(SessionAuthToken, null);

But the response was 403 failure.

Which means my token is stuck in limbo, right?

What are the possible causes that I failed to revoke a session token?

Any advice?

That's odd that you're getting a 403.  Everything looksOK to me.  Can you
query the token info?
http://code.google.com/apis/gdata/authsub.html#TokenInfo

BTW, you can always manually revoke a token at
https://www.google.com/accounts/IssuedAuthSubTokens

Eric

Anyway, I am glad to know that users could manage their tokens from
the URL you listed.

~Thx.