NAME

revokeprovisioningtoken - revokes a provisioning token of a context, or a cross-context token.

SYNOPSIS

revokeprovisioningtoken [OPTION]...

DESCRIPTION

This command line tool revokes a provisioning token. Its secret is refused from then on; a client still using it is answered with 401. Revoking a token that does not exist, or no longer does, is not treated as an error - the exit code stays 0, as for every other tool asked to remove something that is not there. That nothing was taken back is reported on the error stream, so it is not mistaken for a completed revocation.

Given a context (-c), a token bound to that context is revoked. Without a context, a cross-context token is revoked; a reseller administrator can revoke only the tokens whose contexts it all owns, any other token is, to it, not there.

In a multi-site installation, run the tool on an admin pod of the site the context belongs to: unlike the site-aware provisioning tools, it does not forward the call to another site.

OPTIONS

-c, --contextid contextid : The context identifier. Without, a cross-context token is revoked.

--token-id id : The identifier of the token, as listprovisioningtokens(1) shows it. Mandatory.

-A, --adminuser admin : Administrator name for authentication. For a context: the context administrator, a reseller administrator owning the context, or the master administrator where MASTER_ACCOUNT_OVERRIDE permits it. For a cross-context token: the master administrator, or a reseller administrator owning every one of the token's contexts where MASTER_ACCOUNT_OVERRIDE permits it; the master administrator can revoke with the override off as well. Optional, depending on your configuration.

-P, --adminpass adminPassword : Administrator password for authentication. Optional, depending on your configuration.

-h, --help : Prints a help text.

--environment : Show info about commandline environment.

--nonl : Remove all newlines (\n) from output.

--responsetimeout : The optional response timeout in seconds when reading data from server (default: 0s; infinite).

EXAMPLES

revokeprovisioningtoken -A contextAdmin -P secret -c 1138 --token-id 3f2c6a1e9b8d4c7fa0e1d2c3b4a59687

Revokes the token of the specified context.

revokeprovisioningtoken -A oxadminmaster -P secret --token-id 9b8d4c7fa0e1d2c3b4a596873f2c6a1e

Revokes a cross-context token.

SEE ALSO

createprovisioningtoken(1), listprovisioningtokens(1), detachprovisioningtoken(1), Provisioning over HTTP