From 48088b1d4218711ed11f8db545d38b3df502461c Mon Sep 17 00:00:00 2001
From: ss <ss>
Date: Fri, 19 Jun 2026 22:46:21 -0600
Subject: [PATCH 1/2] add token revocation endpoint to .well-known
 openid-configuration

---
 .../main/java/org/forgerock/oauth2/core/OAuth2Uris.java    | 7 +++++++
 .../org/forgerock/openam/oauth2/OAuth2UrisFactory.java     | 5 +++++
 .../openidconnect/OpenIDConnectProviderConfiguration.java  | 1 +
 3 files changed, 13 insertions(+)

diff --git a/openam-oauth2/src/main/java/org/forgerock/oauth2/core/OAuth2Uris.java b/openam-oauth2/src/main/java/org/forgerock/oauth2/core/OAuth2Uris.java
index b19b37971b..2578350572 100644
--- a/openam-oauth2/src/main/java/org/forgerock/oauth2/core/OAuth2Uris.java
+++ b/openam-oauth2/src/main/java/org/forgerock/oauth2/core/OAuth2Uris.java
@@ -113,4 +113,11 @@ public interface OAuth2Uris {
      * @return The URL.
      */
     String getDeviceAuthorizationEndpoint();
+    
+    /**
+     * Returns the default URL for this provider's token Revocation endpoint.
+     *
+     * @return The URL.
+     */
+    String getRevocationEndpoint();
 }
diff --git a/openam-oauth2/src/main/java/org/forgerock/openam/oauth2/OAuth2UrisFactory.java b/openam-oauth2/src/main/java/org/forgerock/openam/oauth2/OAuth2UrisFactory.java
index 498ea939fa..b1122f5dc1 100644
--- a/openam-oauth2/src/main/java/org/forgerock/openam/oauth2/OAuth2UrisFactory.java
+++ b/openam-oauth2/src/main/java/org/forgerock/openam/oauth2/OAuth2UrisFactory.java
@@ -203,5 +203,10 @@ public String getClientRegistrationEndpoint() {
         public String getDeviceAuthorizationEndpoint() {
             return baseUrl + "/device/code";
         }
+        
+        @Override
+        public String getRevocationEndpoint() {
+            return baseUrl + "/revoke";
+        }
     }
 }
diff --git a/openam-oauth2/src/main/java/org/forgerock/openidconnect/OpenIDConnectProviderConfiguration.java b/openam-oauth2/src/main/java/org/forgerock/openidconnect/OpenIDConnectProviderConfiguration.java
index 5164f6f1d0..a9edca6ec2 100644
--- a/openam-oauth2/src/main/java/org/forgerock/openidconnect/OpenIDConnectProviderConfiguration.java
+++ b/openam-oauth2/src/main/java/org/forgerock/openidconnect/OpenIDConnectProviderConfiguration.java
@@ -102,6 +102,7 @@ public JsonValue getConfiguration(OAuth2Request request) throws OAuth2Exception
         configuration.put("claims_parameter_supported", providerSettings.getClaimsParameterSupported());
         configuration.put("token_endpoint_auth_methods_supported", providerSettings.getEndpointAuthMethodsSupported());
         configuration.put("device_authorization_endpoint", uris.getDeviceAuthorizationEndpoint());
+        configuration.put("revocation_endpoint", uris.getRevocationEndpoint());
 
         return new JsonValue(configuration);
     }

From bbfb1898bff2af5f91683e9ef5ca074a59b14d8a Mon Sep 17 00:00:00 2001
From: Valery Kharseko <vharseko@3a-systems.ru>
Date: Sat, 20 Jun 2026 08:34:23 +0300
Subject: [PATCH 2/2] Update OpenAM version to 16.1.1

---
 openam-mcp-server/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/openam-mcp-server/pom.xml b/openam-mcp-server/pom.xml
index a392a087e8..f7031a96e9 100644
--- a/openam-mcp-server/pom.xml
+++ b/openam-mcp-server/pom.xml
@@ -20,7 +20,7 @@
 	<parent>
 		<groupId>org.openidentityplatform.openam</groupId>
 		<artifactId>openam</artifactId>
-		<version>16.0.7-SNAPSHOT</version>
+		<version>16.1.1</version>
 	</parent>
 	<artifactId>openam-mcp-server</artifactId>
 	<name>OpenAM MCP Server</name>