Revoke all of a user's Aura Historia access tokens as admin
Changed onRevokes all Aura Historia access tokens owned by the target user in one atomic PostgreSQL transaction.
Cognito JWTs and Aura Historia access tokens are accepted. The caller's persisted user role must be ADMIN; delegated Aura Historia access tokens must also have access-tokens:write. Authorization is enforced in the User service, not only at the HTTP route.
userId must be a valid User ID and the target user must exist. An existing user with no tokens and a repeated request both return 204 No Content; a missing target user returns 404 USER_NOT_FOUND. Deletion is scoped to the target user, leaves unrelated users' tokens untouched, and committed deletion makes the revoked credentials fail authentication. It never reveals raw token values or hashes.
Request
- Base URL: https://api.stage.aura-historia.com
- URL: https://api.stage.aura-historia.com/api/v1/admin/users/{userId}/access-tokens
- Auth: one of:
- HTTP bearer
- HTTP bearer
Path parameters
Unique User ID for the user whose tokens are revoked.
Response
All access tokens revoked, or no tokens were present for the existing target user.
Changes
- breaking
removed the required property
/from the response with the status - breaking
removed the required property
/from the response with the status - breaking
removed the required property
/from the response with the status - breaking
removed the required property
/from the response with the status - breaking
removed the required property
/from the response with the status - breaking
removed the required property
/from the response with the status - info
for the
pathrequest parameteruserId, the format was generalized fromuuidto no format - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status - info
added the required property
/to the response with the status
- breaking
- info
endpoint added
- info