Delete Grant

//native

async function getManagementToken(auth: RT.Auth0): Promise<string> {

  const response = await fetch(`https://${auth.domain}/oauth/token`, {

    method: "POST",

    headers: { "Content-Type": "application/json" },

    body: JSON.stringify({

      grant_type: "client_credentials",

      client_id: auth.client_id,

      client_secret: auth.client_secret,

      audience: `https://${auth.domain}/api/v2/`,

    }),

  })

  if (!response.ok) {

    throw new Error(`${response.status} ${await response.text()}`)

  }

  const { access_token } = (await response.json()) as { access_token: string }

  return access_token

}

/**

 * Delete Grant

 * Revoke a consent grant by its id, ending the user's authorization for that application.

 */

export async function main(auth: RT.Auth0, grant_id: string) {

  const token = await getManagementToken(auth)

  const url = new URL(`https://${auth.domain}/api/v2/grants/${grant_id}`)

  const response = await fetch(url, {

    method: "DELETE",

    headers: {

      Authorization: `Bearer ${token}`,

      Accept: "application/json",

    },

  })

  if (!response.ok) {

    throw new Error(`${response.status} ${await response.text()}`)

  }

  if (response.status === 204) return { success: true }

  return await response.json()

}