Fix issue of revoking refresh tokens

wso2-extensions · Oct 27, 2023 · 365e7d3 · 365e7d3
1 parent bf6bc20
commit 365e7d3
Showing 1 changed file with 3 additions and 3 deletions.
diff --git a/...o2.carbon.identity.oauth/src/main/java/org/wso2/carbon/identity/oauth2/OAuth2Service.java b/...o2.carbon.identity.oauth/src/main/java/org/wso2/carbon/identity/oauth2/OAuth2Service.java
@@ -557,7 +557,7 @@ public OAuthRevocationResponseDTO revokeTokenByOAuthClient(OAuthRevocationReques
                 }
                 if (refreshTokenFirst) {
                     refreshTokenDO = OAuth2ServiceComponentHolder.getInstance().getTokenProvider()
-                            .getVerifiedRefreshToken(revokeRequestDTO.getToken(), revokeRequestDTO.getConsumerKey());
+                            .getVerifiedRefreshToken(revokeRequestDTO.getConsumerKey(), revokeRequestDTO.getToken());
                     if (refreshTokenDO == null ||
                             StringUtils.isEmpty(refreshTokenDO.getRefreshTokenState()) ||
                             !(OAuthConstants.TokenStates.TOKEN_STATE_ACTIVE
@@ -573,8 +573,8 @@ public OAuthRevocationResponseDTO revokeTokenByOAuthClient(OAuthRevocationReques
                             .getVerifiedAccessToken(revokeRequestDTO.getToken(), true);
                     if (accessTokenDO == null) {
                         refreshTokenDO = OAuth2ServiceComponentHolder.getInstance().getTokenProvider()
-                                .getVerifiedRefreshToken(revokeRequestDTO.getToken(),
-                                        revokeRequestDTO.getConsumerKey());
+                                .getVerifiedRefreshToken(revokeRequestDTO.getConsumerKey(),
+                                        revokeRequestDTO.getToken());
                         if (refreshTokenDO == null ||
                                 StringUtils.isEmpty(refreshTokenDO.getRefreshTokenState()) ||
                                 !(OAuthConstants.TokenStates.TOKEN_STATE_ACTIVE