diff --git a/src/IdentityInfrastructure.IntegrationTests/AuthTokensApiSpec.cs b/src/IdentityInfrastructure.IntegrationTests/AuthTokensApiSpec.cs
index 94ed0cbe..50c7d48f 100644
--- a/src/IdentityInfrastructure.IntegrationTests/AuthTokensApiSpec.cs
+++ b/src/IdentityInfrastructure.IntegrationTests/AuthTokensApiSpec.cs
@@ -79,7 +79,7 @@ public async Task WhenRevokeRefreshToken_ThenRevokes()
             RefreshToken = oldRefreshToken
         });
 
-        revoked.StatusCode.Should().Be(HttpStatusCode.OK);
+        revoked.StatusCode.Should().Be(HttpStatusCode.NoContent);
 
         var refreshed = await Api.PostAsync(new RefreshTokenRequest
         {
diff --git a/src/Infrastructure.Web.Api.Operations.Shared/Identities/RefreshTokenRequest.cs b/src/Infrastructure.Web.Api.Operations.Shared/Identities/RefreshTokenRequest.cs
index e3f5a1e1..79f22e22 100644
--- a/src/Infrastructure.Web.Api.Operations.Shared/Identities/RefreshTokenRequest.cs
+++ b/src/Infrastructure.Web.Api.Operations.Shared/Identities/RefreshTokenRequest.cs
@@ -2,7 +2,7 @@
 
 namespace Infrastructure.Web.Api.Operations.Shared.Identities;
 
-[Route("tokens/refresh", ServiceOperation.Post)]
+[Route("/tokens/refresh", ServiceOperation.Post)]
 public class RefreshTokenRequest : UnTenantedRequest<RefreshTokenResponse>
 {
     public required string RefreshToken { get; set; }
diff --git a/src/Infrastructure.Web.Api.Operations.Shared/Identities/RevokeRefreshTokenRequest.cs b/src/Infrastructure.Web.Api.Operations.Shared/Identities/RevokeRefreshTokenRequest.cs
index cf5c39d1..7e37990f 100644
--- a/src/Infrastructure.Web.Api.Operations.Shared/Identities/RevokeRefreshTokenRequest.cs
+++ b/src/Infrastructure.Web.Api.Operations.Shared/Identities/RevokeRefreshTokenRequest.cs
@@ -2,7 +2,7 @@
 
 namespace Infrastructure.Web.Api.Operations.Shared.Identities;
 
-[Route("tokens/{RefreshToken}", ServiceOperation.Delete)]
+[Route("/tokens/{RefreshToken}", ServiceOperation.Delete)]
 public class RevokeRefreshTokenRequest : UnTenantedDeleteRequest
 {
     public required string RefreshToken { get; set; }