Admin revoke any user's token
DELETE
/personal_access_tokens/{tokenId}/admin_revoke
Admin-only endpoint. Revokes any user's token with a required audit comment explaining the reason (e.g. compromised credentials). The audit comment is recorded in the audit trail. Session auth only.
Request Body
application/json
JSON "audit_comment": "Compromised credentials reported by user."
{
}
Responses
Token revoked by admin
application/json
JSON "toast": { "title": "User updated.", "message": [ [ "Successfully updated user." ] ], "variant": "success" }
{
}