Repository navigation
Document how to revoke all tokens #10095
Description
Activity
Should we also consider adding another issue for
gh auth revoke-all --really-really-I-mean-itwhich does this programmatically? I think it's available via an API?@williammartin : I'm unsure if the OAuth authorization REST APIs are designed for anyone outside of the OAuth application owner to reset or delete a token, meaning I'm unsure if users can do it themselves. 🤔
Should we also consider adding another issue for
gh auth revoke-all --really-really-I-mean-itwhich does this programmatically? I think it's available via an API?@williammartin : I'm unsure if the OAuth authorization REST APIs are designed for anyone outside of the OAuth application owner to reset or delete a token, meaning I'm unsure if users can do it themselves. 🤔
FWIW, my understanding was the same: only the owner can do it from the API and users cannot.
Good to know, thank you.
Description
gh auth logouthelp says thus:It's a somewhat common question that people ask about revocation in some form or another:
gh auth#9233We should update the help text on
gh auth logoutto indicate that to revoke CLI generated OAuth tokens they should navigate to https://github.com/settings/applications (or equivalent on their targeted host) and click the Revoke button.Acceptance Criteria
When I run
gh auth logout --helpThen I see directions on how to revoke CLI OAuth tokens, and a warning that it will revoke all the OAuth tokens.
Notes
Should we also consider adding another issue for
gh auth revoke-all --really-really-I-mean-itwhich does this programmatically? I think it's available via an API?