revoke method
Best-effort revocation of session.
The OAuthServerMetadata this client parses does not expose a revocation endpoint, so no network call is made; the session is always removed from the OAuthSessionStore. When a revocation endpoint becomes available, a token revocation POST would be attempted here (ignoring any failure) before the local delete.
Implementation
Future<void> revoke(final OAuthSession session) async {
await _sessionStore.delete(session.sub);
}