User Account

Revoke a user's Aura Historia access token as admin

Changed on

Revokes one Aura Historia access token for the target user.

Cognito JWTs and Aura Historia access tokens are accepted. The caller's persisted user role must be ADMIN; delegated Aura Historia access tokens must also have access-tokens:write. Authorization is enforced in the User service, not only at the HTTP route.

Both userId and accessTokenId must be valid User and AccessToken IDs, respectively. The database deletion is scoped by both identifiers, so an access-token ID belonging to another user cannot revoke that user's credential. The operation is idempotent: it returns 204 No Content when the token was deleted, was already absent, or belongs to another user. It never reveals raw token values or hashes.

delete/api/v1/admin/users/{userId}/access-tokens/{accessTokenId}

Request

  • Base URL: https://api.stage.aura-historia.com
  • URL: https://api.stage.aura-historia.com/api/v1/admin/users/{userId}/access-tokens/{accessTokenId}
  • Auth: one of:
    • HTTP bearer
    • HTTP bearer

Path parameters

userIdstring required

Unique User ID for the user whose token is revoked.

accessTokenIdstring required

Unique AccessToken ID for the access token to revoke.

Response

Access token revoked, or already absent for the target user.

Changes

    • breaking

      removed the required property / from the response with the status

    • breaking

      removed the required property / from the response with the status

    • breaking

      removed the required property / from the response with the status

    • breaking

      removed the required property / from the response with the status

    • breaking

      removed the required property / from the response with the status

    • info

      for the path request parameter accessTokenId, the format was generalized from uuid to no format

    • info

      for the path request parameter userId, the format was generalized from uuid to no format

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      endpoint added