RocketChat / RocketChat/Rocket.Chat
[API] Ability to list and revoke user generated api tokens in admin console
Open
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 46.1k
- Forks
- 13.9k
- Avg merge
- 3d 3h
- Merged PRs (30d)
- 130
Description
Description:
Hello, i was trying to find who uses a certain token and found out that there is no straightforward way to do it rather then looking it up directly inside mongodb. I think such feature is essential for proper usage.
Expected behavior:
Page inside workspace configuration that shows
- who and when issued token
- 2fa status
- ability to revoke it
- last time it was used
Actual behavior:
Server Setup Information:
- Version of Rocket.Chat Server: 6.4.8
- Operating System: linux
- Deployment Method:
- Number of Running Instances: 1
- DB Replicaset Oplog: enabled
- NodeJS Version: v14.21.3
- MongoDB Version: 5
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
No source file or test is named in the issue. Start by tracing the existing user-generated token records in MongoDB and the workspace configuration admin console, then identify the relevant API entry points. Done means administrators can see token ownership, issue time, 2FA status, and last use, and can revoke tokens.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- mongodb, typescript
- Domain
- api, authentication, authorization, backend, frontend
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 25/100