Movatterモバイル変換


[0]ホーム

URL:


Skip to content

Navigation Menu

Sign in
Appearance settings

Search code, repositories, users, issues, pull requests...

Provide feedback

We read every piece of feedback, and take your input very seriously.

Saved searches

Use saved searches to filter your results more quickly

Sign up
Appearance settings

feat: add OAuth2 token bulk revocation endpoint#18847

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to ourterms of service andprivacy statement. We’ll occasionally send you account related emails.

Already on GitHub?Sign in to your account

Open
ThomasK33 wants to merge1 commit intothomask33/07-14-feat_oauth2_add_frontend_ui_for_client_credentials_applications
base:thomask33/07-14-feat_oauth2_add_frontend_ui_for_client_credentials_applications
Choose a base branch
Loading
fromthomask33/07-14-feat_oauth2_add_bulk_token_revocation_endpoint_with_usage_tracking

Conversation

ThomasK33
Copy link
Member

Add OAuth2 Token Revocation Endpoint for Applications

This PR adds a new endpoint to revoke all OAuth2 tokens for a specific application for the authenticated user. The implementation:

  • Creates a newPOST /oauth2-provider/apps/{app}/revoke endpoint that revokes all tokens and authorization codes for a specific OAuth2 application
  • Handles both authorization code flow tokens and client credentials flow tokens
  • Updates the frontend to use this new endpoint instead of the previous token revocation method
  • Adds comprehensive tests to verify token revocation works correctly for different scenarios
  • Implements tracking of client secret usage by updating theLastUsedAt timestamp when a secret is used for authentication

The new endpoint provides a more efficient way to revoke all tokens for an application in a single request, improving security by allowing users to quickly revoke access when needed.

@ThomasK33Graphite App
Copy link
MemberAuthor

ThomasK33 commentedJul 14, 2025
edited
Loading

@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_bulk_token_revocation_endpoint_with_usage_tracking branch from7f46f86 tocbac27eCompareJuly 14, 2025 16:22
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_frontend_ui_for_client_credentials_applications branch from8c29819 to168176bCompareJuly 14, 2025 16:22
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_bulk_token_revocation_endpoint_with_usage_tracking branch fromcbac27e to72e138dCompareJuly 14, 2025 17:18
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_frontend_ui_for_client_credentials_applications branch from168176b to4fcf5b1CompareJuly 14, 2025 17:18
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_bulk_token_revocation_endpoint_with_usage_tracking branch from72e138d to3c3dde2CompareJuly 14, 2025 17:46
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_frontend_ui_for_client_credentials_applications branch from4fcf5b1 to65b1054CompareJuly 14, 2025 17:46
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_bulk_token_revocation_endpoint_with_usage_tracking branch from3c3dde2 toa696160CompareJuly 14, 2025 18:10
@ThomasK33ThomasK33 marked this pull request as ready for reviewJuly 14, 2025 18:19
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_frontend_ui_for_client_credentials_applications branch from65b1054 tof044533CompareJuly 15, 2025 17:27
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_bulk_token_revocation_endpoint_with_usage_tracking branch froma696160 to4e82d80CompareJuly 15, 2025 17:27
@ThomasK33ThomasK33 changed the base branch fromthomask33/07-14-feat_oauth2_add_frontend_ui_for_client_credentials_applications tographite-base/18847July 16, 2025 20:09
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_bulk_token_revocation_endpoint_with_usage_tracking branch from4e82d80 to8830706CompareJuly 17, 2025 13:43
@ThomasK33ThomasK33 changed the base branch fromgraphite-base/18847 tothomask33/07-14-feat_oauth2_add_frontend_ui_for_client_credentials_applicationsJuly 17, 2025 13:43
Change-Id: Ia484466d0892e5043f3937b717c28fff91c17ce8Signed-off-by: Thomas Kosiewski <tk@coder.com>
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_frontend_ui_for_client_credentials_applications branch fromc84c4be to40d7fd1CompareJuly 17, 2025 14:38
@ThomasK33ThomasK33force-pushed thethomask33/07-14-feat_oauth2_add_bulk_token_revocation_endpoint_with_usage_tracking branch from8830706 to13de8e2CompareJuly 17, 2025 14:38
Sign up for freeto join this conversation on GitHub. Already have an account?Sign in to comment
Reviewers

@aslilacaslilacAwaiting requested review from aslilacaslilac is a code owner

Assignees

@ThomasK33ThomasK33

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging this pull request may close these issues.

1 participant
@ThomasK33

[8]ページ先頭

©2009-2025 Movatter.jp