User Account

Revoke all of a user's Aura Historia access tokens as admin

Changed on

Revokes all Aura Historia access tokens owned by the target user in one atomic PostgreSQL transaction.

Cognito JWTs and Aura Historia access tokens are accepted. The caller's persisted user role must be ADMIN; delegated Aura Historia access tokens must also have access-tokens:write. Authorization is enforced in the User service, not only at the HTTP route.

userId must be a valid User ID and the target user must exist. An existing user with no tokens and a repeated request both return 204 No Content; a missing target user returns 404 USER_NOT_FOUND. Deletion is scoped to the target user, leaves unrelated users' tokens untouched, and committed deletion makes the revoked credentials fail authentication. It never reveals raw token values or hashes.

delete/api/v1/admin/users/{userId}/access-tokens

Request

  • Base URL: https://api.stage.aura-historia.com
  • URL: https://api.stage.aura-historia.com/api/v1/admin/users/{userId}/access-tokens
  • Auth: one of:
    • HTTP bearer
    • HTTP bearer

Path parameters

userIdstring required

Unique User ID for the user whose tokens are revoked.

Response

All access tokens revoked, or no tokens were present for the existing target user.

Changes

    • breaking

      removed the required property / from the response with the status

    • breaking

      removed the required property / from the response with the status

    • breaking

      removed the required property / from the response with the status

    • breaking

      removed the required property / from the response with the status

    • breaking

      removed the required property / from the response with the status

    • breaking

      removed the required property / from the response with the status

    • info

      for the path request parameter userId, the format was generalized from uuid to no format

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      added the required property / to the response with the status

    • info

      endpoint added