Method RevokeUserAuthToken

admin/server/users.go:310–342

(ctx context.Context, req *adminv1.RevokeUserAuthTokenRequest)

}

func (s *Server) RevokeUserAuthToken(ctx context.Context, req *adminv1.RevokeUserAuthTokenRequest) (*adminv1.RevokeUserAuthTokenResponse, error) {
	observability.AddRequestAttributes(ctx,
		attribute.String("args.token_id", req.TokenId),
	)

	var tokenID string
	if req.TokenId == "current" { // Special alias for the current token
		if auth.GetClaims(ctx).OwnerType() != auth.OwnerTypeUser {
			return nil, status.Error(codes.PermissionDenied, "not authenticated with a user token")
		}
		tokenID = auth.GetClaims(ctx).AuthTokenID()
	} else {
		token, err := s.findUserAuthTokenFuzzy(ctx, req.TokenId)
		if err != nil {
			return nil, err
		}

		claims := auth.GetClaims(ctx)
		forceAccess := claims.Superuser(ctx) && req.SuperuserForceAccess
		if token.UserID != claims.OwnerID() && !forceAccess {
			return nil, status.Error(codes.PermissionDenied, "not authorized to revoke auth tokens for other users")
		}

		tokenID = token.ID
	}

	err := s.admin.DB.DeleteUserAuthToken(ctx, tokenID)
	if err != nil {
		return nil, err
	}

	return &adminv1.RevokeUserAuthTokenResponse{}, nil
}

func (s *Server) RevokeAllUserAuthTokens(ctx context.Context, req *adminv1.RevokeAllUserAuthTokensRequest) (*adminv1.RevokeAllUserAuthTokensResponse, error) {
	observability.AddRequestAttributes(ctx,