d65606cd96d773d713a3f3f248d63b51363d4a1a

Added: Opaque refresh tokens are accepted in token alongside access tokens, with an optional advisory token_type_hint (access_token or refresh_token). Revoking either token ends the connection, which must be re-authorized. An access token that has already expired, and a refresh token that has since been rotated, both still end it.
Added: Partner and public (MCP) clients can revoke their own tokens. Public clients identify themselves with client_id alone; a token issued to another client returns 400 invalid_grant.