OAuth Apps
Revoke all app tokens
Revokes every access and refresh token currently issued to an OAuth app, in a single operation. Use this for emergency credential rotation, suspected secret leaks, or as a follow-up to POST /oauth-clients/{appId}/regenerate-secret when you want existing sessions invalidated immediately rather than letting them expire naturally.
The response count is the total number of tokens revoked across both types. Clients of this app must then obtain new tokens via the standard OAuth flow.
Creator-only.
post/oauth-clients/{appId}/revoke-all-tokens
Path parameters
appIdstring required
OAuth app ID
Response
All tokens revoked
Example response
{
"message": "All tokens revoked successfully"
}