zumwald / better-vsts-npm-auth

Platform agnostic library and acompanying oauth service enabling developers to easily obtain and use tokens for authorizing NPM feeds in VSTS
MIT License
49 stars 15 forks source link

How to revoke token access #37

Closed ehills closed 3 years ago

ehills commented 3 years ago

Hi there, less of an issue and more of a question.. I used your service this morning but now I wish to revoke the access/refresh token that was generated and that your site saw. Is this possiblefrom azure devops? It doesnt appear to be (although my organisation might be disallowing it?).

I know you claim that your site doesn't see it but the security consious man in me wants to really make sure that is the case.

Cheers, Ed

zumwald commented 3 years ago

Totally respect the skepticism, it's the right security stance for sure. You can revoke authorization for an app like so: https://intercom.help/appcenter/en/articles/1338717-i-have-connected-to-the-wrong-azure-devops-account-how-can-i-re-connect-to-the-correct-one