#47 [Admin Panel] Token Management API - Revoke All User Tokens

closed high Created 2025-11-27 07:12 · Updated 2025-11-27 08:53

Description

Edit
Implement POST /api/v1/admin/tokens/revoke-all/<user_id> endpoint to revoke all tokens for a user. **API Specification:** - Endpoint: POST /api/v1/admin/tokens/revoke-all/<user_id> - Permission Required: manage_users - Path Parameter: user_id (UUID) - Response: {success: true, user_id, tokens_revoked: count} **Requirements:** - Revoke all active tokens for specified user - Useful when user is compromised or leaving - Log audit event with count of revoked tokens - Include reason in audit log **Use Cases:** - User account compromise - Employee offboarding - Security incident response - Password reset (revoke existing sessions) **IMPORTANT:** Implement with ultra attention to details and correctness. **BEFORE CLOSING:** Take screenshot showing bulk token revocation. Add comment summarizing implementation.

Comments

Loading comments...

Context

Loading context...

Audit History

View All
Loading audit history...