Skip to content

feat: Add a bulk publisher revocation endpoint#1860

Open
autumnfound wants to merge 4 commits into
eclipse-openvsx:mainfrom
autumnfound:malowe/main/10109-open-vsx_org
Open

feat: Add a bulk publisher revocation endpoint#1860
autumnfound wants to merge 4 commits into
eclipse-openvsx:mainfrom
autumnfound:malowe/main/10109-open-vsx_org

Conversation

@autumnfound
Copy link
Copy Markdown
Contributor

@autumnfound autumnfound commented May 21, 2026

Related to the request EclipseFdn/open-vsx.org#10109

This endpoint, using the admin access token as authentication, allows for multiple publishers to be unpublished simulataneously. This additionally adds optional support for adding a reason to the audit log for revoking publisher contributions.

Resolves EclipseFdn/open-vsx.org#10109
To ensure full removal of revoked publishers, removal of namespace
memberships was added to the publisher revocation flow.
As a new guard rail, any publishers that are also admins pushed for
revocation via the API gets rejected and must first have their admin
role revoked.
@autumnfound autumnfound requested review from gnugomez and netomi May 21, 2026 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant