MAQPNADocs

maqpna accounts revoke

Revoke a user's connected account at a provider

Govern-o json | yaml

Synopsis#

maqpna accounts revoke USER PROVIDER [--gateway URL] [--issuer ISS] [--yes]

Flags#

FlagTypeDescriptionDefault
--gatewaystringgateway base URL (env MAQPNA_GATEWAY_URL; default: the context's gateway)none
--issuerstringuser's issuer (default: the gateway's user realm)none
--oidc-token-filestringfile holding an OIDC access token for the admin API (env MAQPNA_OIDC_TOKEN_FILE); wins over --tokennone
--tokenstringstatic admin token (env MAQPNA_ADMIN_TOKEN; dev/break-glass)none
-y, --yesswitchdo not ask for confirmation (required when stdin is not a terminal)none

The global flags (--context, -o, --no-color, ...) work with every command.

Examples#

maqpna accounts revoke alice@example.com github

What happens when you run it#

  • Talks to the gateway: --gateway, else MAQPNA_GATEWAY_URL, else the current context's gateway (maqpna context).
  • Authenticates to the admin API with the token stored by maqpna login, --oidc-token-file, or a static --token (MAQPNA_ADMIN_TOKEN).
  • --yes: do not ask for confirmation (required when stdin is not a terminal).
  • Prints a table by default; -o json or -o yaml print the data, and --jq EXPR filters the JSON.

Exit codes#

CodeMeaning
0success
1error (the message says what failed, with a hint when there is one)
2usage error: unknown flag, missing argument or bad value; the synopsis is printed
3a check failed, a change is blocked, or a result did not match (tamper, policy mismatch) (not used by this command)

Terminal demo#

maqpna accounts revoke --help.cast

This needs a gateway feature the local MAQPNA does not enable (memory, the token vault or signed audit checkpoints), so the recording shows its help.