Method RevokeServiceAuthToken

admin/server/service.go:513–544

RevokServiceAuthToken revokes an auth token for a service account.

(ctx context.Context, req *adminv1.RevokeServiceAuthTokenRequest)

// RevokServiceAuthToken revokes an auth token for a service account.
func (s *Server) RevokeServiceAuthToken(ctx context.Context, req *adminv1.RevokeServiceAuthTokenRequest) (*adminv1.RevokeServiceAuthTokenResponse, error) {
	observability.AddRequestAttributes(ctx,
		attribute.String("args.token_id", req.TokenId),
	)

	token, err := s.admin.DB.FindServiceAuthToken(ctx, req.TokenId)
	if err != nil {
		return nil, err
	}

	service, err := s.admin.DB.FindService(ctx, token.ServiceID)
	if err != nil {
		return nil, err
	}

	org, err := s.admin.DB.FindOrganization(ctx, service.OrgID)
	if err != nil {
		return nil, err
	}

	claims := auth.GetClaims(ctx)
	if !claims.OrganizationPermissions(ctx, org.ID).ManageOrg {
		return nil, status.Error(codes.PermissionDenied, "not allowed to revoke auth token")
	}

	err = s.admin.DB.DeleteServiceAuthToken(ctx, token.ID)
	if err != nil {
		return nil, err
	}

	return &adminv1.RevokeServiceAuthTokenResponse{}, nil
}

func serviceToPB(service *database.Service, orgName string) *adminv1.Service {
	attr, err := structpb.NewStruct(service.Attributes)