Operator

Operator: revoke one personal token of a person

Operator console only: requires the web session of an address in the operator allowlist of this installation, sent from the application itself. Every other signed-in caller and every valid Bearer token receives 404 NOT_FOUND, whether or not this installation has an operator configured; a caller with no valid credential receives 401, as on every route. Recorded in the operator log. Calls made with the token answer 401 from now on. Tre does not notify its owner. The body gives the reason, from a closed list, and may give a reference: a ticket or card key, never an address. A token that is not this person’s, is not a personal token or is already revoked answers 404.

delete/api/ops/users/{userId}/tokens/{tokenId}

Request

  • Base URL: https://tre-app.com
  • URL: https://tre-app.com/api/ops/users/{userId}/tokens/{tokenId}
  • Auth: one of:
    • API key in cookie __Secure-authjs.session-token
    • API key in cookie authjs.session-token

Request body

reasonCode'security_incident' | 'customer_request' | 'acceptable_use' required
referencestring

Response

No content

Changes

No recorded changes to this operation across all 1 revision of this API.