Revoke User OAuth Token

#1

Hi there! I’m trying to implement PagerDuty OAuth 2.0 functionality.
I was looking into the documentation (auth-2-0-functionality) but it seems there’s no way to do a “Logout” or single user “Revoke Token” petition
Is there a way we can do this (if implements REST it would be great)?

#2

Hi Liz,

Thanks for reaching out! You can read how to revoke tokens using the API here:

https://developer.pagerduty.com/api-reference/23e4d1cfe1b45-delete-a-user-s-session

Please let me know if that helps or if you have any other questions!

#3

Hi Nick, I’ve already read it, but my response array is empty when I execute:
users/{id}/sessions/{type}/{session_id}

Also, it explicitly states that “Beginning November 2021, user sessions no longer includes newly issued OAuth tokens.”, which are the tokens I’m trying to revoke

#4

Hey Liz,

OAuth tokens can be explicitly revoked from the user’s User Settings tab. All sessions become unavailable if the user’s PagerDuty account is deleted.

Let me know if you’ve got any other questions!

Dan Jeffs
Technical Support Engineer
PagerDuty.com