RevokeCurrentAuthToken revokes the current auth token
(ctx context.Context, req *adminv1.RevokeCurrentAuthTokenRequest)
| 440 | |
| 441 | // RevokeCurrentAuthToken revokes the current auth token |
| 442 | func (s *Server) RevokeCurrentAuthToken(ctx context.Context, req *adminv1.RevokeCurrentAuthTokenRequest) (*adminv1.RevokeCurrentAuthTokenResponse, error) { |
| 443 | claims := auth.GetClaims(ctx) |
| 444 | if claims == nil { |
| 445 | return nil, status.Error(codes.Unauthenticated, "not authenticated") |
| 446 | } |
| 447 | |
| 448 | // Error if authenticated as anything other than a user |
| 449 | if claims.OwnerType() != auth.OwnerTypeUser { |
| 450 | return nil, status.Error(codes.Unauthenticated, "not authenticated as a user") |
| 451 | } |
| 452 | tokenID := claims.AuthTokenID() |
| 453 | |
| 454 | err := s.admin.DB.DeleteUserAuthToken(ctx, tokenID) |
| 455 | if err != nil { |
| 456 | return nil, err |
| 457 | } |
| 458 | |
| 459 | return &adminv1.RevokeCurrentAuthTokenResponse{}, nil |
| 460 | } |
| 461 | |
| 462 | func (s *Server) SudoGetResource(ctx context.Context, req *adminv1.SudoGetResourceRequest) (*adminv1.SudoGetResourceResponse, error) { |
| 463 | claims := auth.GetClaims(ctx) |
nothing calls this directly
no test coverage detected