OAuth Apps

Revoke all app tokens

Changed on

Revokes every access and refresh token currently issued to an OAuth app, in a single operation. Use this for emergency credential rotation, suspected secret leaks, or as a follow-up to POST /oauth-clients/{appId}/regenerate-secret when you want existing sessions invalidated immediately rather than letting them expire naturally.

The response carries only a confirmation message; it does not say how many tokens were revoked. Clients of this app must then obtain new tokens via the standard OAuth flow.

Creator-only.

post/oauth-clients/{appId}/revoke-all-tokens

Request

  • Base URL
    https://app.pipeshub.com/api/v1
  • URL
    https://app.pipeshub.com/api/v1/oauth-clients/{appId}/revoke-all-tokens
  • Auth
    HTTP bearer

Path parameters

appIdstring required

OAuth app ID

Response

All tokens revoked

messagestring required

Example response

{
  "message": "All tokens revoked successfully"
}

Changes

    • warning

      removed the optional property from the response with the status

    • info

      added the non-success response with the status

    • info

      added the non-success response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      added the optional property / to the response with the status

    • info

      the response property became required for the status