code: BoxRevokeAuthRequest revokeOAuth(String token, String clientId, String clientSecret) {
          BoxRevokeAuthRequest request = new BoxRevokeAuthRequest(mSession, getTokenRevokeUrl(), token, clientId, clientSecret);
          request.setRequestHandler(new BoxRequest.BoxRequestHandler(request){
  
              @Override
              public boolean onException(BoxRequest request, BoxHttpResponse response, BoxException ex) throws BoxException.RefreshFailure {
                  // if a revoke request fails for any reason we do not want to retry it again after the user refreshes or logs in again.
                  return false;
              }
          });
          return request;
      }
docs: Revoke OAuth, to be called when you need to logout a user/revoke authentication.