Skip to content

Revoke and Remove Tokens on Disconnect#112

Merged
n7studios merged 6 commits intomainfrom
revoke-remove-tokens-disconnect
Apr 13, 2026
Merged

Revoke and Remove Tokens on Disconnect#112
n7studios merged 6 commits intomainfrom
revoke-remove-tokens-disconnect

Conversation

@n7studios
Copy link
Copy Markdown
Contributor

Summary

When the user clicks the Disconnect button at Settings > Kit MemberMouse:

  • Revokes the access and refresh tokens by calling the oauth/revoke endpoint
  • Removes the v3 API Key, v4 Access Token, v4 Refresh Token and v4 Token Expires settings from the database (this Plugin never stored or used a v3 API Secret).

Testing

  • testCredentialsAndResourcesAreDeletedOnDisconnect: end to end test confirming that the API Key, Access Token and Refresh Token are deleted from the Plugin.
  • testCredentialsDeletedAndInvalidWhenRevoked: integration test confirming that the credentials are deleted from the Plugin and no longer work i.e. are revoked, when the API's revoke_tokens method is called.

Checklist

@n7studios n7studios self-assigned this Apr 10, 2026
@n7studios n7studios requested review from a team, ciccio-kit and noelherrick and removed request for a team April 10, 2026 03:04
@n7studios n7studios marked this pull request as ready for review April 10, 2026 03:04
Copy link
Copy Markdown

@ciccio-kit ciccio-kit left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM ✅

Comment thread tests/EndToEnd/general/SettingsCest.php Outdated
Comment thread admin/class-convertkit-mm-admin.php
@n7studios n7studios merged commit 45ed9b9 into main Apr 13, 2026
54 of 56 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants