Add deleteUserTokens and deleteTokenById to outbound app management (#620)

Co-authored-by: shuni[bot] <shuni[bot]@users.noreply.github.com>

Author: descope[bot]

README.md

@@ -1453,6 +1453,21 @@ const latestTenantToken = await descopeClient.management.outboundApplication.fet
   'tenant-id',
   { forceRefresh: false }
 );
+
+// Delete user tokens by appId and/or userId
+// At least one of appId or userId should be provided
+// Token deletion cannot be undone. Use carefully.
+await descopeClient.management.outboundApplication.deleteUserTokens('my-app-id', 'user-id');
+
+// Delete all tokens for a specific app
+await descopeClient.management.outboundApplication.deleteUserTokens('my-app-id');
+
+// Delete all tokens for a specific user
+await descopeClient.management.outboundApplication.deleteUserTokens(undefined, 'user-id');
+
+// Delete a specific token by its ID
+// Token deletion cannot be undone. Use carefully.
+await descopeClient.management.outboundApplication.deleteTokenById('token-id');
 ```
 
 ### Manage Inbound Applications

lib/management/outboundapplication.test.ts

@@ -489,4 +489,120 @@ describe('Management OutboundApplication', () => {
       });
     });
   });
+
+  describe('deleteUserTokens', () => {
+    it('should send the correct request with both appId and userId', async () => {
+      const httpResponse = {
+        ok: true,
+        json: () => ({}),
+        clone: () => ({
+          json: () => Promise.resolve({}),
+        }),
+        status: 200,
+      };
+      mockHttpClient.delete.mockResolvedValue(httpResponse);
+
+      const resp = await management.outboundApplication.deleteUserTokens('app123', 'user456');
+
+      expect(mockHttpClient.delete).toHaveBeenCalledWith(
+        apiPaths.outboundApplication.deleteUserTokens,
+        {
+          queryParams: { appId: 'app123', userId: 'user456' },
+        },
+      );
+
+      expect(resp).toEqual({
+        code: 200,
+        data: {},
+        ok: true,
+        response: httpResponse,
+      });
+    });
+
+    it('should work with only appId', async () => {
+      const httpResponse = {
+        ok: true,
+        json: () => ({}),
+        clone: () => ({
+          json: () => Promise.resolve({}),
+        }),
+        status: 200,
+      };
+      mockHttpClient.delete.mockResolvedValue(httpResponse);
+
+      const resp = await management.outboundApplication.deleteUserTokens('app123');
+
+      expect(mockHttpClient.delete).toHaveBeenCalledWith(
+        apiPaths.outboundApplication.deleteUserTokens,
+        {
+          queryParams: { appId: 'app123', userId: undefined },
+        },
+      );
+
+      expect(resp).toEqual({
+        code: 200,
+        data: {},
+        ok: true,
+        response: httpResponse,
+      });
+    });
+
+    it('should work with only userId', async () => {
+      const httpResponse = {
+        ok: true,
+        json: () => ({}),
+        clone: () => ({
+          json: () => Promise.resolve({}),
+        }),
+        status: 200,
+      };
+      mockHttpClient.delete.mockResolvedValue(httpResponse);
+
+      const resp = await management.outboundApplication.deleteUserTokens(undefined, 'user456');
+
+      expect(mockHttpClient.delete).toHaveBeenCalledWith(
+        apiPaths.outboundApplication.deleteUserTokens,
+        {
+          queryParams: { appId: undefined, userId: 'user456' },
+        },
+      );
+
+      expect(resp).toEqual({
+        code: 200,
+        data: {},
+        ok: true,
+        response: httpResponse,
+      });
+    });
+  });
+
+  describe('deleteTokenById', () => {
+    it('should send the correct request and receive correct response', async () => {
+      const httpResponse = {
+        ok: true,
+        json: () => ({}),
+        clone: () => ({
+          json: () => Promise.resolve({}),
+        }),
+        status: 200,
+      };
+      mockHttpClient.delete.mockResolvedValue(httpResponse);
+
+      const resp = await management.outboundApplication.deleteTokenById('token123');
+
+      expect(mockHttpClient.delete).toHaveBeenCalledWith(
+        apiPaths.outboundApplication.deleteTokenById,
+        {
+          queryParams: { id: 'token123' },
+        },
+      );
+
+      expect(resp).toEqual({
+        code: 200,
+        data: {},
+        ok: true,
+        response: httpResponse,
+      });
+    });
+  });
 });

lib/management/outboundapplication.ts

@@ -108,6 +108,18 @@ const withOutboundApplication = (httpClient: HttpClient) => ({
       }),
       (data) => data.token,
     ),
+  deleteUserTokens: (appId?: string, userId?: string): Promise<SdkResponse<never>> =>
+    transformResponse(
+      httpClient.delete(apiPaths.outboundApplication.deleteUserTokens, {
+        queryParams: { appId, userId },
+      }),
+    ),
+  deleteTokenById: (id: string): Promise<SdkResponse<never>> =>
+    transformResponse(
+      httpClient.delete(apiPaths.outboundApplication.deleteTokenById, {
+        queryParams: { id },
+      }),
+    ),
 });
 
 export default withOutboundApplication;

lib/management/paths.ts

@@ -105,6 +105,8 @@ export default {
     fetchTokenByScopes: '/v1/mgmt/outbound/app/user/token',
     fetchTenantToken: '/v1/mgmt/outbound/app/tenant/token/latest',
     fetchTenantTokenByScopes: '/v1/mgmt/outbound/app/tenant/token',
+    deleteUserTokens: '/v1/mgmt/outbound/user/tokens',
+    deleteTokenById: '/v1/mgmt/outbound/token',
   },
   sso: {
     settings: '/v1/mgmt/sso/settings',