Revoke API Key

DELETE /keys/{keyId}

curl -X DELETE "https://api.astracollab.app/v1/keys/key_1234567890abcdef" \
  -H "Authorization: Bearer your-api-key-here"

{
  "success": true,
  "data": {
    "message": "API key revoked successfully",
    "keyId": "key_1234567890abcdef",
    "revokedAt": "2024-01-15T10:30:00Z"
  }
}

{
  "success": false,
  "error": {
    "code": "KEY_NOT_FOUND",
    "message": "API key with ID 'key_1234567890abcdef' not found"
  }
}

{
  "success": false,
  "error": {
    "code": "KEY_ALREADY_REVOKED",
    "message": "API key is already revoked",
    "details": {
      "keyId": "key_1234567890abcdef",
      "revokedAt": "2024-01-10T15:20:00Z"
    }
  }
}

{
  "success": false,
  "error": {
    "code": "ACCESS_DENIED",
    "message": "You don't have permission to revoke this API key"
  }
}

{
  "success": false,
  "error": {
    "code": "CANNOT_REVOKE_OWN_KEY",
    "message": "Cannot revoke the API key you are currently using",
    "details": {
      "keyId": "key_1234567890abcdef"
    }
  }
}

DELETE /keys/bulk

{
  "keyIds": [
    "key_1234567890abcdef",
    "key_0987654321fedcba",
    "key_abcdef1234567890"
  ]
}

{
  "success": true,
  "data": {
    "revoked": [
      "key_1234567890abcdef",
      "key_0987654321fedcba"
    ],
    "failed": [
      {
        "keyId": "key_abcdef1234567890",
        "reason": "Key not found"
      }
    ],
    "revokedAt": "2024-01-15T10:30:00Z"
  }
}

const revokeKeyWithConfirmation = async (keyId, keyName, usageCount) => {
  const message = usageCount > 0
    ? `Are you sure you want to revoke "${keyName}"? This key has been used ${usageCount} times and revoking it will immediately disable all applications using it. This action cannot be undone.`
    : `Are you sure you want to revoke "${keyName}"? This action cannot be undone.`;
  
  const confirmed = confirm(message);
  
  if (confirmed) {
    try {
      await revokeKey(keyId);
      console.log('API key revoked successfully');
    } catch (error) {
      console.error('Failed to revoke API key:', error);
    }
  }
};

const rotateApiKey = async (oldKeyId, oldKeyName) => {
  try {
    // 1. Create new key
    const newKey = await client.keys.create({
      name: `${oldKeyName} (Rotated)`,
      permissions: ['files:read', 'files:write', 'folders:read']
    });
    
    console.log('New API Key created:', newKey.fullKey);
    
    // 2. Update applications with new key
    // This step depends on your application architecture
    await updateApplicationKey(newKey.fullKey);
    
    // 3. Verify new key works
    const testClient = new AstraCollab(newKey.fullKey);
    await testClient.files.list();
    
    // 4. Revoke old key
    await client.keys.revoke(oldKeyId);
    
    console.log('Key rotation completed successfully');
    
  } catch (error) {
    console.error('Key rotation failed:', error);
    // Consider revoking the new key if rotation fails
  }
};

const emergencyRevoke = async (suspiciousKeyIds) => {
  console.log('Emergency revocation initiated...');
  
  try {
    await client.keys.bulkRevoke(suspiciousKeyIds);
    console.log('Emergency revocation completed');
    
    // Notify security team
    await notifySecurityTeam({
      action: 'emergency_revocation',
      keyIds: suspiciousKeyIds,
      timestamp: new Date().toISOString()
    });
    
  } catch (error) {
    console.error('Emergency revocation failed:', error);
    // Escalate to security team
  }
};

const getRevocationHistory = async () => {
  const keys = await client.keys.list({ status: 'revoked' });
  
  return keys.map(key => ({
    keyId: key.id,
    name: key.name,
    revokedAt: key.revokedAt,
    lastUsedAt: key.lastUsedAt,
    usageCount: key.usageCount
  }));
};