Skip to main content

revoke_access_token_of_client

headless_lms_server::controllers::main_frontend::oauth::revoke

Function revoke_access_token_of_client 

Source 
async fn revoke_access_token_of_client(
    conn: &mut PgConnection,
    form: &RevokeParams,
    client: &OAuthClient,
    token_hmac_key: &SecretString,
    cache: &Cache,
) -> Result<bool, ControllerError>
Expand description

Deletes the presented access token if it belongs to the authenticated client, and evicts its cached user mapping so it cannot keep authenticating from a stale cache hit.

Ok(false) means no live access token has that digest.