blob: 22e07f4cc7b81759e9db963340a697d0c5093e95 (
plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
|
# frozen_string_literal: true
module API
class PersonalAccessTokens
class SelfRevocation < ::API::Base
include APIGuard
feature_category :authentication_and_authorization
helpers ::API::Helpers::PersonalAccessTokensHelpers
# As any token regardless of `scope` should be able to revoke itself
# all availabe scopes are allowed for this API class.
# Please be aware of the permissive scope when adding new endpoints to this class.
allow_access_with_scope(Gitlab::Auth.all_available_scopes)
before { authenticate! }
resource :personal_access_tokens do
delete 'self' do
revoke_token(access_token)
end
end
end
end
end
|