#47 [Admin Panel] Token Management API - Revoke All User Tokens
Description
EditImplement POST /api/v1/admin/tokens/revoke-all/<user_id> endpoint to revoke all tokens for a user.
**API Specification:**
- Endpoint: POST /api/v1/admin/tokens/revoke-all/<user_id>
- Permission Required: manage_users
- Path Parameter: user_id (UUID)
- Response: {success: true, user_id, tokens_revoked: count}
**Requirements:**
- Revoke all active tokens for specified user
- Useful when user is compromised or leaving
- Log audit event with count of revoked tokens
- Include reason in audit log
**Use Cases:**
- User account compromise
- Employee offboarding
- Security incident response
- Password reset (revoke existing sessions)
**IMPORTANT:** Implement with ultra attention to details and correctness.
**BEFORE CLOSING:** Take screenshot showing bulk token revocation. Add comment summarizing implementation.
Comments
Loading comments...
Context
Loading context...
Audit History
View AllLoading audit history...