fossa_delete_oidc_trust_relationship
Revoke an OIDC trust relationship to prevent its tokens from authenticating to FOSSA. Use for leaked or over-broad grants.
Instructions
Revoke one OIDC trust relationship, so tokens matching it no longer buy a FOSSA login.
WRITES TO FOSSA. Requires FOSSA_ALLOW_WRITES=true, FOSSA_ALLOW_ADMIN=true, and FOSSA_ALLOW_DESTRUCTIVE=true.
This is the revocation path for a leaked or over-broad grant, and it is not reversible from here: the audiences and claim rules are gone once deleted. Read it with fossa_get_oidc_trust_relationship first if it may need to be recreated. FOSSA API tokens already minted through it are not invalidated by this call; they expire on their own schedule.
Input Schema
| Name | Required | Description | Default |
|---|---|---|---|
| trust_relationship_id | Yes |
Output Schema
| Name | Required | Description | Default |
|---|---|---|---|
No arguments | |||