Revoke OAUTH application refresh token as admin

How to Use GitLab Self-managed
1

Hi,

  • I am one of the admins of a self-managed (premium) GitLab instance.
  • On the instance level we created an oauth application, so people may use glab or git-credential-oauth as credential helper.
  • glab does store both an access and refresh token and so may be used “forever”.
  • To enhance security we would like everyone to login to GitLab once per week (Monday morning) via MFA/SAML using our internal IdP.

Is there a way to delete/revoke all refresh-tokens as an admin in a programmaticall way? Ideally this could be done via REST/GraphQL but accessing the DB would be OKish as well.

3

git2

25m

Hi there,

you can achieve this via the Gitlab API in both premium & CE, its how I migrated all of my repo’s from GitHub to my own Gitlab instance!

I assume you got this figured out but if not let me know and I can provide steps :slight_smile:

Cheers