Problem Statement

Currently, admins can view and delete user SSH keys, but there is no equivalent capability for OAuth tokens. This gap creates operational challenges in scenarios where user accounts are disabled but their OAuth tokens remain.

Use Cases

• When a user account is disabled (not deleted), any OAuth tokens it authorized causes the consumer application loses access with no clean path to recover.

• Admins are left with only two workarounds, both of which are disruptive:
  • Deleting tokens directly from the database - carries risk.
  • Disabling and re-enabling the Applink OAuth - this refreshes all user tokens system-wide, causing unintended disruption for other users.

Feature Request

Provide admins with a easy way to view and delete OAuth tokens on a per-user basis consistent with the existing SSH key management experience.

Expected outcome: Admins can cleanly revoke a specific user's OAuth token without database access or system-wide side effects, enabling the consumer application to prompt for reauthorization through a new (active) account.