终端用户令牌吊销:按 endUserId 切断该 (App, endUser) 下全部存量 app_user 令牌(iat <= 切断时刻恒拒,即时生效;TTL = 令牌最大寿命 24h 自清)——终端此后须经开发者服务端重新换发;幂等(重复切断 = 刷新切断时刻,恒 200);写恒审计(app.revoke_app_user,detail 携 endUserId/atEpochSec);jti 单令牌吊销不设 HTTP 面(控制台拿不到 jti,endUser 级切断已覆盖)
POST
/v1/apps/{id}/app-user-revocations
Authorizations
Section titled “Authorizations”Parameters
Section titled “Parameters”Header Parameters
Section titled “Header Parameters”x-tansr-org
string
Org 作用域声明(org 公开 id);服务端校验成员资格与角色,非成员恒 404、角色不够 403
Request Bodyrequired
Section titled “Request Bodyrequired”Media typeapplication/json
object
endUserId
required
终端用户标识(契约 1 同源正则):切断该 (App, endUser) 下 iat <= 此刻的全部存量 app_user 令牌
string
Examplegenerated
{ "endUserId": "example"}Responses
Section titled “Responses”已切断({revoked: true, endUserId})
Media typeapplication/json
object
key
additional properties
any
Examplegenerated
{}Bad_request(endUserId 形态非法:可打印 ASCII 无空格 1–128,契约 1 同源正则)
Media typeapplication/json
object
error
required
object
code
required
错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)
string
message
required
string
requestId
required
string
detail
object
Example
{ "error": { "code": "adjudicator_not_authorized" }}Forbidden(org 角色不够 / PAT 缺 control scope)
Media typeapplication/json
object
error
required
object
code
required
错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)
string
message
required
string
requestId
required
string
detail
object
Example
{ "error": { "code": "adjudicator_not_authorized" }}Not_found(不存在/他人/非 app 键,不泄露存在性)
Media typeapplication/json
object
error
required
object
code
required
错误码注册表单源派生(src/http/errors.ts ERROR_CODES;码稳定,消费方按码翻译)
string
message
required
string
requestId
required
string
detail
object
Example
{ "error": { "code": "adjudicator_not_authorized" }}本文是否有帮助?
感谢反馈,我们会持续改进这篇文章。