POST /internal/oauth/revoke-user-tokens

Internal API endpoint, called by identity-service to cascade revoke OAuth tokens, hard-delete OAuth connections and authorization consents on password change/account lockout/GDPR erasure. Protected by InternalAPIKeyAuth + ExtractTenantFromHeaderStrict middleware.

Request Body

Accepts an empty JSON object {}

Responses

Status	Description	Schema
200	Revocation result (includes revoked_access_tokens, revoked_refresh_tokens counts)	handler.swaggerBatchRevokeDetailResponse
400	Invalid request parameters: missing user_id	gitee_com_linmes_authms_base_dto.SimpleResponse
500	Internal server error	gitee_com_linmes_authms_base_dto.SimpleResponse

Referenced Schemas

dto.BatchRevokeUserTokensResponse

Field	Type	Required	Example	Constraints	Description
revoked_access_tokens	integer	No
revoked_refresh_tokens	integer	No

gitee_com_linmes_authms_base_dto.SimpleResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
message	string	No
timestamp	string	No

handler.swaggerBatchRevokeDetailResponse

Field	Type	Required	Example	Constraints	Description
code	integer	No
data	dto.BatchRevokeUserTokensResponse	No
message	string	No