Withdraw an application's access

DELETE

/v1/oauth/clients/{client_id}/authorization

const url = 'https://api.adversarial.com/api/v1/oauth/clients/example/authorization';
const options = {method: 'DELETE', headers: {cookie: 'arm-session=<arm-session>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request DELETE \
  --url https://api.adversarial.com/api/v1/oauth/clients/example/authorization \
  --cookie arm-session=<arm-session>

Revokes a previously granted authorization and invalidates the tokens issued under it. The application must be authorized again before it can access the account. Withdrawing another member’s authorization requires organization management permission.

Authorizations

session
bearer

Parameters

Path Parameters

client_id

required

string

The application’s public client ID

Query Parameters

user_id

string | null format: uuid

Target user whose authorization is being revoked. Defaults to the caller. When different from the caller, requires ORGANIZATION_MANAGE.

Responses

204

Authorization revoked

401

Unauthorized

403

Forbidden

404

Client not found or no active authorization for target user