code: def revoke_refresh_token(self, client_id, token, client_secret=None):
          
          body = {
              'client_id': client_id,
              'token': token,
              'client_secret': client_secret
          }
  
          return self.post(
              'https://{}/oauth/revoke'.format(self.domain), data=body)
docs: Revokes a Refresh Token if it has been compromised
             
             Each revocation request invalidates not only the specific token, but all other tokens 
             based on the same authorization grant. This means that all Refresh Tokens that have 
             been issued for the same user, application, and audience will be revoked.
  
             Args:
                  client_id (str): The Client ID for your Application
  
                  token (str): The Refresh Token you want to revoke
  
                  client_secret (str, optional): The Client Secret for your Application.
                          Required for confidential applications.
                          See: https://auth0.com/docs/applications/application-types#confidential-applications
              
              See: https://auth0.com/docs/api/authentication#refresh-token