Create, revoke, or clear tokens
Ansible Automation Platform supports the following commands for OAuth2 token management:
create_oauth2_token
Use the following command to create OAuth2 tokens (specify the username for example_user):
$ aap-gateway-manage create_oauth2_token --user example_user
New OAuth2 token for example_user: j89ia8OO79te6IAZ97L7E8bMgXCON2Ensure that you give a valid user when creating tokens. Otherwise, an error message that you attempted to issue the command without specifying a user, or supplied a username that does not exist, is displayed.
revoke_oauth2_tokens
Use this command to revoke OAuth2 tokens, both application tokens and personal access tokens (PAT). It revokes all application tokens (but not their associated refresh tokens), and revokes all personal access tokens. However, you can also specify a user for whom to revoke all tokens.
To revoke all existing OAuth2 tokens use the following command:
$ aap-gateway-manage revoke_oauth2_tokens
To revoke all OAuth2 tokens and their refresh tokens use the following command:
$ aap-gateway-manage revoke_oauth2_tokens --revoke_refresh
To revoke all OAuth2 tokens for the user with id=example_user (specify the username for example_user):
$ aap-gateway-manage revoke_oauth2_tokens --user example_user
To revoke all OAuth2 tokens and refresh token for the user with id=example_user:
$ aap-gateway-manage revoke_oauth2_tokens --user example_user --revoke_refresh
cleartokens
Use the cleartokens command to delete all sessions that have expired.
For more information, see Content from django-oauth-toolkit.readthedocs.io is not included.cleartokens in Django’s Oauth Toolkit documentation.
clearsessions
Use the cleartokens command to delete all sessions that have expired.
For more information, see Content from docs.djangoproject.com is not included.Clearing the session store in Django’s Oauth Toolkit documentation.
For more information about OAuth2 token management in the UI, see the Applications.