Method ListServiceAuthTokens

admin/server/service.go:432–478

ListServiceAuthTokens lists all auth tokens for a service account.

(ctx context.Context, req *adminv1.ListServiceAuthTokensRequest)

// ListServiceAuthTokens lists all auth tokens for a service account.
func (s *Server) ListServiceAuthTokens(ctx context.Context, req *adminv1.ListServiceAuthTokensRequest) (*adminv1.ListServiceAuthTokensResponse, error) {
	observability.AddRequestAttributes(ctx,
		attribute.String("args.service_name", req.ServiceName),
		attribute.String("args.organization_name", req.Org),
	)

	org, err := s.admin.DB.FindOrganizationByName(ctx, req.Org)
	if err != nil {
		return nil, err
	}

	claims := auth.GetClaims(ctx)
	if !claims.OrganizationPermissions(ctx, org.ID).ManageOrg {
		return nil, status.Error(codes.PermissionDenied, "not allowed to update org")
	}

	service, err := s.admin.DB.FindServiceByName(ctx, org.ID, req.ServiceName)
	if err != nil {
		return nil, err
	}

	tokens, err := s.admin.DB.FindServiceAuthTokens(ctx, service.ID)
	if err != nil {
		return nil, err
	}

	dtos := make([]*adminv1.ServiceToken, len(tokens))
	for i, token := range tokens {
		id, err := uuid.Parse(token.ID)
		if err != nil {
			return nil, status.Errorf(codes.Internal, "invalid token ID %q: %v", token.ID, err)
		}

		prefix := authtoken.FromID(authtoken.TypeService, id).Prefix()

		dtos[i] = &adminv1.ServiceToken{
			Id:        token.ID,
			Prefix:    prefix,
			CreatedOn: timestamppb.New(token.CreatedOn),
			ExpiresOn: timestamppb.New(safeTime(token.ExpiresOn)),
		}
	}

	return &adminv1.ListServiceAuthTokensResponse{
		Tokens: dtos,
	}, nil
}

// IssueServiceAuthToken issues a new auth token for a service account.
func (s *Server) IssueServiceAuthToken(ctx context.Context, req *adminv1.IssueServiceAuthTokenRequest) (*adminv1.IssueServiceAuthTokenResponse, error) {