anchor.diff:  --------------------------------------------------
   
   [[security-api-invalidate-token]]
  -The tokens returned from this API have a finite period of time for which they
  -are valid and after that time period, they can no longer be used. However, if
  -a token must be invalidated immediately, you can do so by submitting a DELETE
  -request to `/_xpack/security/oauth2/token`.
  +If a token must be invalidated immediately, you can do so by submitting a DELETE
  +request to `/_xpack/security/oauth2/token`.  For example:
   
   [source,js]
   --------------------------------------------------
  
positive.code: === Token Management APIs
  
  The `token` API enables you to create and invalidate bearer tokens for access
  without requiring basic authentication. The get token API takes the same
  parameters as a typical OAuth 2.0 token API except for the use of a JSON
  request body.
  
  [[security-api-get-token]]
  To obtain a token, submit a POST request to the `/_xpack/security/oauth2/token`
  endpoint.
  
negative.code: --------------------------------------------------
  // CONSOLE
  
  The following example output contains the access token, the amount of time (in
  seconds) that the token expires in, and the type:
  
  [source,js]
  --------------------------------------------------
  