Saltar al contenido

Revoke a credential

Módulo Credentials

POST/credentials/{id}/revokecredentials.revoke

Revokes the credential; scans after revocation are refused. Requires `Idempotency-Key`; a replay returns the original response. A rule that refuses the request returns 422 with `refusal` and `reason`.

  • Requiere la capacidad credentials.credential.revoke.
  • Alcances de OAuth: credentials.
  • Envía el encabezado Idempotency-Key. Una repetición con la misma clave devuelve la respuesta original.
  • Estados de error: 400, 401, 404, 409, 422, 429. Los errores son detalles de problema RFC 9457.

Parámetros de ruta y de consulta

credentials.revoke: Parámetros de ruta y de consulta
CampoTipoObligatorioDescripción
idstring (uuid)SíIdentifier of the credential.

Respuesta 200: Credential

credentials.revoke: Credential
CampoTipoObligatorioDescripción
idstring (uuid)SíIdentifier of the credential.
org_idstring (uuid)SíIdentifier of the owning organization, derived from the parent row and never accepted from the caller.
created_atstring (date-time)SíWhen the row was created.
created_bystring (uuid) | nullSíIdentifier of the person who created the row; null when a seed, platform or system process created it.
updated_atstring (date-time)SíWhen the row was last updated.
updated_bystring (uuid) | nullSíIdentifier of the person who last updated the row; null when a seed, platform or system process updated it.
project_idstring (uuid)SíIdentifier of the project.
credential_category_idstring (uuid)SíIdentifier of the credential category.
engagement_idstring (uuid) | nullSíIdentifier of the engagement.
issued_bystring (uuid) | nullSíIdentifier of the issuer.
valid_fromstring (date-time)SíStart of validity.
valid_tostring (date-time) | nullSíEnd of validity.
holder_person_idstring (uuid)SíIdentifier of the holder.
credential_numberstringSíNumber printed on the badge, issued by the database.Restricciones: pattern ^[A-Za-z0-9][A-Za-z0-9._-]{0,63}$
revoked_atstring (date-time) | nullSíWhen the credential was revoked.
revoked_bystring (uuid) | nullSíIdentifier of the person who revoked it.
{
  "id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "org_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "created_at": "2026-10-08T14:30:00Z",
  "created_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "updated_at": "2026-10-08T14:30:00Z",
  "updated_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "project_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "credential_category_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "engagement_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "issued_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "valid_from": "2026-10-08T14:30:00Z",
  "valid_to": "2026-10-08T14:30:00Z",
  "holder_person_id": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f",
  "credential_number": "CR-000123",
  "revoked_at": "2026-10-08T14:30:00Z",
  "revoked_by": "0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f"
}

Ejemplos de código

curl -X POST "$XOS_BASE_URL/credentials/0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f/revoke" \
  -H "Authorization: Bearer $XOS_API_KEY" \
  -H "Idempotency-Key: $(uuidgen)"
const { data } = await xos.credentials.revoke("0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f");
response = xos.credentials.revoke("0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f")
xos credentials revoke 0192f1e2-7c3a-7b4d-9e8f-1a2b3c4d5e6f