in src/main/java/org/apache/sling/auth/oauth_client/impl/JcrUserHomeOAuthTokenStore.java [133:145]
public void clearAccessToken(@NotNull ClientConnection connection, @NotNull ResourceResolver resolver) throws OAuthException {
try {
User currentUser = adaptToUser(resolver);
currentUser.removeProperty(propertyPath(connection, PROPERTY_NAME_ACCESS_TOKEN));
currentUser.removeProperty(propertyPath(connection, PROPERTY_NAME_EXPIRES_AT));
// TODO: need to remove refresh token as well?
adaptToSession(resolver).save();
} catch (RepositoryException e) {
throw new OAuthException(e);
}
}