Manage OAuth2 Authorizations

CodeScene records OAuth2 authorizations created by the CodeScene CLI and IDE integrations. You can review and revoke the authorizations associated with a user.

Open Configuration, select the Users/Authentication tab, and select OAuth2 Authorizations in the Token Management section.

The page lists each authorized client, its granted scopes, and the number of active tokens. No entry is shown until a user signs in with an OAuth2-enabled client, such as by running cs auth login.

Revoke An Authorization

Select Revoke All for a client to invalidate all stored refresh tokens for that client. This action cannot be undone. Any CLI or IDE integration using the authorization must sign in again before it can access CodeScene.

Administrator Access

Administrators can view OAuth2 authorizations for all users and revoke an authorization on a user’s behalf. Non-administrators can only view and revoke their own authorizations.

Revoking an OAuth2 authorization does not affect other clients or a user’s Personal Access Tokens.