Add delete_user_tokens and delete_token methods for outbound apps (#729)

Co-authored-by: shuni[bot] <shuni[bot]@users.noreply.github.com>

Author: descope[bot]

descope/management/common.py

@@ -120,6 +120,8 @@ class MgmtV1:
     outbound_application_fetch_tenant_token_path = (
         "/v1/mgmt/outbound/app/tenant/token/latest"
     )
+    outbound_application_delete_user_tokens_path = "/v1/mgmt/outbound/user/tokens"
+    outbound_application_delete_token_path = "/v1/mgmt/outbound/token"
 
     # user
     user_create_path = "/v1/mgmt/user/create"

descope/management/outbound_application.py

@@ -449,6 +449,46 @@ def fetch_tenant_token(
             options=options,
         )
 
+    def delete_user_tokens(
+        self,
+        app_id: Optional[str] = None,
+        user_id: Optional[str] = None,
+    ):
+        """
+        Delete outbound application tokens by app ID and/or user ID.
+        At least one of app_id or user_id must be provided.
+
+        Args:
+        app_id (str): Optional ID of the outbound application.
+        user_id (str): Optional ID of the user.
+
+        Raise:
+        AuthException: raised if delete operation fails
+        """
+        params = {}
+        if app_id:
+            params["appId"] = app_id
+        if user_id:
+            params["userId"] = user_id
+        uri = MgmtV1.outbound_application_delete_user_tokens_path
+        self._http.delete(uri, params=params)
+
+    def delete_token(
+        self,
+        token_id: str,
+    ):
+        """
+        Delete an outbound application token by its ID.
+
+        Args:
+        token_id (str): The ID of the token to delete.
+
+        Raise:
+        AuthException: raised if delete operation fails
+        """
+        uri = MgmtV1.outbound_application_delete_token_path
+        self._http.delete(uri, params={"id": token_id})
+
     @staticmethod
     def _compose_create_update_body(
         name: str,

samples/management/outbound_application_sample_app.py

@@ -136,6 +136,31 @@ def main():
         except AuthException as e:
             logging.info(f"Tenant token fetch failed {e}")
 
+        # DELETE USER TOKENS
+
+        try:
+            logging.info("Going to delete user tokens by app and user id")
+            descope_client.mgmt.outbound_application.delete_user_tokens(
+                app_id=outbound_app_id,
+                user_id="user123",
+            )
+            logging.info("User tokens deleted successfully")
+
+        except AuthException as e:
+            logging.info(f"User tokens deletion failed {e}")
+
+        # DELETE TOKEN BY ID
+
+        try:
+            logging.info("Going to delete token by id")
+            descope_client.mgmt.outbound_application.delete_token(
+                token_id="token-id-123",
+            )
+            logging.info("Token deleted successfully")
+
+        except AuthException as e:
+            logging.info(f"Token deletion failed {e}")
+
         # DELETE OUTBOUND APPLICATION
 
         try:

tests/management/test_outbound_application.py

@@ -768,6 +768,116 @@ def test_compose_create_update_body_with_empty_lists(self):
 
         assert body == expected_body
 
+    def test_delete_user_tokens_success(self):
+        client = DescopeClient(
+            self.dummy_project_id,
+            self.public_key_dict,
+            False,
+            self.dummy_management_key,
+        )
+
+        with patch("requests.delete") as mock_delete:
+            network_resp = mock.Mock()
+            network_resp.ok = True
+            mock_delete.return_value = network_resp
+            client.mgmt.outbound_application.delete_user_tokens(
+                app_id="app123", user_id="user456"
+            )
+
+            mock_delete.assert_called_once()
+            call_args = mock_delete.call_args
+            assert call_args[1]["params"]["appId"] == "app123"
+            assert call_args[1]["params"]["userId"] == "user456"
+
+    def test_delete_user_tokens_with_app_id_only(self):
+        client = DescopeClient(
+            self.dummy_project_id,
+            self.public_key_dict,
+            False,
+            self.dummy_management_key,
+        )
+
+        with patch("requests.delete") as mock_delete:
+            network_resp = mock.Mock()
+            network_resp.ok = True
+            mock_delete.return_value = network_resp
+            client.mgmt.outbound_application.delete_user_tokens(app_id="app123")
+
+            mock_delete.assert_called_once()
+            call_args = mock_delete.call_args
+            assert call_args[1]["params"]["appId"] == "app123"
+            assert "userId" not in call_args[1]["params"]
+
+    def test_delete_user_tokens_with_user_id_only(self):
+        client = DescopeClient(
+            self.dummy_project_id,
+            self.public_key_dict,
+            False,
+            self.dummy_management_key,
+        )
+
+        with patch("requests.delete") as mock_delete:
+            network_resp = mock.Mock()
+            network_resp.ok = True
+            mock_delete.return_value = network_resp
+            client.mgmt.outbound_application.delete_user_tokens(user_id="user456")
+
+            mock_delete.assert_called_once()
+            call_args = mock_delete.call_args
+            assert call_args[1]["params"]["userId"] == "user456"
+            assert "appId" not in call_args[1]["params"]
+
+    def test_delete_user_tokens_failure(self):
+        client = DescopeClient(
+            self.dummy_project_id,
+            self.public_key_dict,
+            False,
+            self.dummy_management_key,
+        )
+
+        with patch("requests.delete") as mock_delete:
+            mock_delete.return_value.ok = False
+            self.assertRaises(
+                AuthException,
+                client.mgmt.outbound_application.delete_user_tokens,
+                "app123",
+                "user456",
+            )
+
+    def test_delete_token_success(self):
+        client = DescopeClient(
+            self.dummy_project_id,
+            self.public_key_dict,
+            False,
+            self.dummy_management_key,
+        )
+
+        with patch("requests.delete") as mock_delete:
+            network_resp = mock.Mock()
+            network_resp.ok = True
+            mock_delete.return_value = network_resp
+            client.mgmt.outbound_application.delete_token("token123")
+
+            mock_delete.assert_called_once()
+            call_args = mock_delete.call_args
+            assert call_args[1]["params"]["id"] == "token123"
+
+    def test_delete_token_failure(self):
+        client = DescopeClient(
+            self.dummy_project_id,
+            self.public_key_dict,
+            False,
+            self.dummy_management_key,
+        )
+
+        with patch("requests.delete") as mock_delete:
+            mock_delete.return_value.ok = False
+            self.assertRaises(
+                AuthException,
+                client.mgmt.outbound_application.delete_token,
+                "token123",
+            )
+
     def test_url_param_to_dict(self):
         # Test URLParam to_dict method
         param = URLParam("test_name", "test_value")