From 32aff8e2f665625ad761e1cc31102c7d6bad6ea3 Mon Sep 17 00:00:00 2001
From: "podishetti.nagavenu" <podishetti.nagavenu@thoughtspot.com>
Date: Thu, 13 Nov 2025 16:51:41 +0530
Subject: [PATCH] invalidate token public APIs

---
 api-spec/openapiSpecv3-2_0.json | 123 ++++++++++++++++++++++++++++++++
 1 file changed, 123 insertions(+)

diff --git a/api-spec/openapiSpecv3-2_0.json b/api-spec/openapiSpecv3-2_0.json
index c693c850..cea61e0d 100644
--- a/api-spec/openapiSpecv3-2_0.json
+++ b/api-spec/openapiSpecv3-2_0.json
@@ -85,6 +85,14 @@
       ],
       "description": "Roles for version 9.9.0.cl"
     },
+    {
+      "name": "26.2.0.cl",
+      "id": "26.2.0.cl",
+      "tags": [
+        "26.2.0.cl"
+      ],
+      "description": "Roles for version 26.2.0.cl"
+    },
     {
       "name": "9.6.0.cl",
       "id": "9.6.0.cl",
@@ -2834,6 +2842,109 @@
         }
       }
     },
+    "/api/rest/2.0/connections/refresh-tokens/revoke": {
+      "post": {
+        "operationId": "invalidateConnectionTokens",
+        "description": "\n <span class=\"since-beta-tag\">Version: 26.2.0.cl or later</span>\n\nUser should have Administrative Privilege or be the Connection Author to Invalidates the refresh tokens.\n\n## Token Invalidation Rules\n\nYou can specify different combinations of identifiers to control\nwhich refresh tokens are invalidated:\n\n- **connection_identifier only**: All user's refresh tokens will be\n  deleted except the connection author.\n- **connection_identifier + user_identifiers**: Only specified user's\n  refresh tokens will be deleted. If the author's user_identifier is\n  included, their token will also be invalidated.\n- **connection_identifier + configuration_identifiers**: Refresh\n  tokens for the specified configurations will be deleted.\n- **connection_identifier + org_identifiers**: Refresh tokens for the\n  specified orgs will be deleted. This is only applicable for published\n  connections.\n\n**Note**: The `org_identifiers` field is only applicable for published connections. Using this field with unpublished connections will result in an error: \"The 'org_identifiers' field is only applicable for published connections. Please ensure the connection is published before including this field.\"\n\nAfter tokens are invalidated, logged-in users will need to re-authenticate to access visualizations.\n\n\n\n\n#### Endpoint URL\n",
+        "tags": [
+          "Connections",
+          "26.2.0.cl"
+        ],
+        "requestBody": {
+          "content": {
+            "application/json": {
+              "schema": {
+                "type": "object",
+                "properties": {
+                  "connection_identifier": {
+                    "description": "Unique ID or name of the connection whose token needs to be deleted. All the users associated with the connection will have their tokens deleted except the author.",
+                    "type": "string"
+                  },
+                  "configuration_identifiers": {
+                    "description": "Unique ID or name of configurations. If provided, the specified configuration's user tokens will be deleted.",
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    }
+                  },
+                  "user_identifiers": {
+                    "description": "Unique ID or name of users. If provided, only the specified user's refresh tokens will be deleted. If the author's user_identifier is included, their token will also be deleted.",
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    }
+                  },
+                  "org_identifiers": {
+                    "description": "Unique ID or name of orgs. This is applicable only for published connections. If provided, the specified org's user tokens will be deleted. This field is only valid for published connections; using it with unpublished connections will return an error.",
+                    "type": "array",
+                    "items": {
+                      "type": "string"
+                    }
+                  }
+                },
+                "required": [
+                  "connection_identifier"
+                ]
+              }
+            }
+          },
+          "required": true
+        },
+        "parameters": [],
+        "responses": {
+          "200": {
+            "description": "Token(s) successfully revoked.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/InvalidateConnectionTokensResponse"
+                }
+              }
+            }
+          },
+          "400": {
+            "description": "Invalid request.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "401": {
+            "description": "Unauthorized access.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "403": {
+            "description": "Forbidden access.",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          },
+          "500": {
+            "description": "Unexpected error",
+            "content": {
+              "application/json": {
+                "schema": {
+                  "$ref": "#/components/schemas/ErrorResponse"
+                }
+              }
+            }
+          }
+        }
+      }
+    },
     "/api/rest/2.0/connection/search": {
       "post": {
         "operationId": "searchConnection",
@@ -22269,6 +22380,18 @@
           }
         }
       },
+      "InvalidateConnectionTokensResponse": {
+        "type": "object",
+        "required": [
+          "revoke_result"
+        ],
+        "properties": {
+          "revoke_result": {
+            "type": "string",
+            "description": "Result message describing the outcome of the token revocation operation."
+          }
+        }
+      },
       "RoleResponse": {
         "type": "object",
         "required": [