# Deleted application has valid tokens

**URL:** <https://discuss.dev.twitch.com/t/deleted-application-has-valid-tokens/25166>\
**Category:** API\
**Created:** [April 25, 2020, 6:03am UTC](https://discuss.dev.twitch.com/t/deleted-application-has-valid-tokens/25166 "2020-04-25T06:03:41Z")\
**Posts on this page:** 2\
**Page:** 1

<div class="post-metadata">

**Author:** ![DBKynd](https://d3ovvz0v2ajtpu.cloudfront.net/user_avatar/discuss.dev.twitch.com/dbkynd/32/2144_2.png) [@DBKynd](https://discuss.dev.twitch.com/u/DBKynd)\
**Post date:** [April 25, 2020, 6:03am UTC](https://discuss.dev.twitch.com/t/deleted-application-has-valid-tokens/25166/1 "2020-04-25T06:03:41Z")

</div>

Using the `https://id.twitch.tv/oauth2/validate` endpoint to validate tokens I found 2 lingering user tokens I no longer use and tried to revoke them through the `https://id.twitch.tv/oauth2/revoke` endpoint.

Both tokens reported as valid. Each token (according to my own documentation) should have had a different `client_id` but they both report the same `client_id`. Not a big deal by itself.

When trying to revoke the tokens I got a 404 “client does not exist” for the reported `client_id` and the `client_id` from my documentation.

Since as of this date you don’t need both the Client-ID and Bearer Authorization headers I tried a few requests to the helix endpoint `https://api.twitch.tv/helix/users`

When using only the Client-ID header I get a 401 “Must provide a valid Client-ID or OAuth token”  
But when using the Bearer Authorization header I get a valid response.

Any thoughts/ideas? Should I contact Twitch support to have them removed/revoked?

The client application no longer exists in my dev console.

(edit) The application was removed quite some time ago. In the order of months to years.

---

<div class="post-metadata">

**Author:** ![system](https://d2opxh93rbxzdn.cloudfront.net/original/2X/0/05909729875cce3b53e59d5561c4d23bb14948fc.png) [@system](https://discuss.dev.twitch.com/u/system)\
**Post date:** [May 25, 2020, 6:17am UTC](https://discuss.dev.twitch.com/t/deleted-application-has-valid-tokens/25166/2 "2020-05-25T06:17:04Z")

</div>

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.