Allow revoking personal access tokens.

1 files changed, 15 insertions, 1 deletions

diff --git a/app/controllers/profiles/personal_access_tokens_controller.rb b/app/controllers/profiles/personal_access_tokens_controller.rb
index dbf06cb4c6d..59de0b26eee 100644
--- a/app/controllers/profiles/personal_access_tokens_controller.rb
+++ b/app/controllers/profiles/personal_access_tokens_controller.rb
@@ -1,7 +1,11 @@
 class Profiles::PersonalAccessTokensController < ApplicationController
   def index
     @user = current_user
-    @personal_access_token = current_user.personal_access_tokens.new
+
+    # Prefer this to `@user.personal_access_tokens.new`, because it
+    # litters the view's call to `@user.personal_access_tokens` with
+    # this stub personal access token.
+    @personal_access_token = PersonalAccessToken.new(user: @user)
   end
 
   def create
@@ -14,6 +18,16 @@ class Profiles::PersonalAccessTokensController < ApplicationController
     end
   end
 
+  def revoke
+    @personal_access_token = current_user.personal_access_tokens.find(params[:id])
+
+    if @personal_access_token.revoke!
+      redirect_to profile_personal_access_tokens_path, notice: "Revoked personal access token #{@personal_access_token.name}!"
+    else
+      render :index
+    end
+  end
+
   private
 
   def personal_access_token_params