Revoke a user's Aura Historia access token as admin
Changed onRevokes one Aura Historia access token for the target user.
Cognito JWTs and Aura Historia access tokens are accepted. The caller's persisted user role must be ADMIN; delegated Aura Historia access tokens must also have access-tokens:write. Authorization is enforced in the User service, not only at the HTTP route.
Both userId and accessTokenId must be valid User and AccessToken IDs, respectively. The database deletion is scoped by both identifiers, so an access-token ID belonging to another user cannot revoke that user's credential. The operation is idempotent: it returns 204 No Content when the token was deleted, was already absent, or belongs to another user. It never reveals raw token values or hashes.
Request
- Base URL: https://api.stage.aura-historia.com
- URL: https://api.stage.aura-historia.com/api/v1/admin/users/{userId}/access-tokens/{accessTokenId}
- Auth: one of:
- HTTP bearer
- HTTP bearer
Path parameters
Unique User ID for the user whose token is revoked.
Unique AccessToken ID for the access token to revoke.
Response
Access token revoked, or already absent for the target user.
Changes
- breaking
removed the required property
/from the response with the status - breaking
removed the required property
/from the response with the status - breaking
removed the required property
/from the response with the status - breaking
removed the required property
/from the response with the status - breaking
removed the required property
/from the response with the status - info
for the
pathrequest parameteraccessTokenId, the format was generalized fromuuidto no format - info
for the
pathrequest parameteruserId, the format was generalized fromuuidto no format - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status
- breaking
- info
endpoint added
- info