revokeAppAuthorization

Withdraw consent for an app and immediately invalidate every app-scoped token the authenticated user holds for it, whichever session minted them — the tokens stop authenticating on their next request, not at their next refresh. Atomic: if the tokens cannot be invalidated, consent is left in place and this returns an error, so a successful response is the only state in which access has actually been withdrawn. Does NOT sign the user out: their identity session and their tokens for other apps are untouched. Returns false when there was nothing to revoke (no active grant and no live tokens), which makes a repeat call safe. Requires a SESSION token.

revokeAppAuthorization(
  appId: BigInt!
): Boolean!

Arguments

revokeAppAuthorization.appId ● BigInt! non-null scalar

Numeric id of the app whose authorization (consent grant) to revoke (BigInt as a decimal string).

Type

Boolean scalar

The Boolean scalar type represents true or false.