If none of those inputs were given, the caller of the API could get the wrong impression thinking something has been done because it was returned a 200.
Added validation on RevokeTokens input so we give a proper response (400) if neither of the fields have been given.
Coverage decreased (-0.2%) to 85.38% when pulling 9f00d46ef32151e2e7853b144041a1e0deb6718e on fix/token-revoke-validation into bd5a9210b5b41a6c9b5d4255de19fc6967d29fb7 on master.
If none of those inputs were given, the caller of the API could get the wrong impression thinking something has been done because it was returned a 200.
Added validation on RevokeTokens input so we give a proper response (400) if neither of the fields have been given.