revoke token 403 failure

[Blessed Geek]

1. My JSP obtained an initialToken by

<%
String authReqUrl =
AuthSubUtil.getRequestUrl(
callBackLocation,
"http://spreadsheets.google.com/feeds",
false,
true);
%>

<script>
location.replace("<%=authReqUrl%>");
</script>

2. Which was successfully exchanged for a session token thro

SessionAuthToken =
AuthSubUtil.exchangeForSessionToken(
initialToken, null);

3. Then I tried revoking the session token by
AuthSubUtil.revokeToken(SessionAuthToken, null);

But the response was 403 failure.

Which means my token is stuck in limbo, right?

What are the possible causes that I failed to revoke a session token?

Any advice?

[Eric Bidelman]

That's odd that you're getting a 403.  Everything looks

OK to me.  Can you query the token info?

http://code.google.com/apis/gdata/authsub.html#TokenInfo

BTW, you can always manually revoke a token at

https://www.google.com/accounts/IssuedAuthSubTokens

Eric

[Blessed Geek]

My mistake. I stored the SessionAuthToken in a session bean but tried
to retrieve it thro a page bean.

Anyway, I am glad to know that users could manage their tokens from
the URL you listed.

~Thx.