It seems Particle has deprecated all forms of
particle token list
I would like to see what access tokens I have and revoke some/all of them. I have lost access/forgotten some of them so running the following does not work as I need to know the access token in advance:
particle token revoke <token>
How can I list/revoke all tokens without knowing what they are? I’ve lost that info. Thanks!
The ability to list access tokens was removed because it makes it too easy to steal an access token. Most access tokens expire after at most 90 days, but if you've manually created long-lived tokens the best option is to log out and select the "Invalidate all my access tokens" option.
Of course you'll need to log in again, and recreate any user-level access tokens that you are using, but this would be a good time to switch to API Users, which provide better access control limits for long-lived things that require an access token.
Ok. That worked. Thank you!
Just to clarify, the only way to do this is via the web console. You can’t do the above from the CLI.
If you particle logout
from the CLI you should be prompted to remove all tokens as well.
The delete all access tokens cloud API command does the same thing from the API.
I tried using the CLI to remove all access tokens and even looked at the help pages for a flag that would allow me to do that. There was no flag and I was not prompted. I’m using CLI version 3.42.1
You are correct, sorry about that. I thought the CLI prompted to delete all tokens as well but it apparently does not.