Add button to remove all App Passwords

[simhnna]

I currently have 2598 App Passwords!
They are mostly created by the Android apps. I created an issue about that here

Anyhow, it would be nice to have a button to remove all app passwords. I know my case is extreme, and since I'm the admin I can just clear them in the database, but normal users should be able to just remove all passwords easily

[rullzer]

I get the idea.
But I must ask. How on earth did you get so many app passwords?

[simhnna]

I'm not sure how that happened. I created an issue in the Android client repository, as I guess it's an issue there. I have Cron jobs running, so I don't think I am suffering from a configuration error...

[trueshanti]

it may not be worth a ticket , but cleaning that mess up without a possible selector is just pain .. so i guess some (f not all) users just leave it be - not sure if that can be exploited :-/

[trueshanti]

i cannot see any new feature/function allowing me to multi-select (+all) and delete devices -- this issue is still unresolved

[szaimen]

I ask because in #27603 was reported that the usage of app-token fixes the creation of new authtokens...

[trueshanti]

I ask because in #27603 was reported that the usage of app-token fixes the creation of new authtokens...

i will test this, but i cannot "force" other users to only use app-token .. also , as user i can only address my own tokens, an adminview wouldnt be useful without the option to clear others' stale sessions ..

for all tokens/session in oc_authtoken 'last_activity' and 'last_check' have the same values

i may have to stick to mysql-cronjobs for now

[joshtrichards]

I won't close this since it's about a means for managing these for the user not the admin, but it's worth noting we now have occ commands for managing these.

See #40026 + nextcloud/documentation#12331

Including a delete parameter that can delete all tokens last used for a given date:

www-data@3493b083fd3c:~/html$ ./occ user:auth-tokens:delete --help
Description:
  Deletes an authentication token

Usage:
  user:auth-tokens:delete [options] [--] <uid> [<id>]

Arguments:
  uid                                      ID of the user to delete tokens for
  id                                       ID of the auth token to delete

Options:
      --last-used-before=LAST-USED-BEFORE  Delete tokens last used before a given date.
  -h, --help                               Display help for the given command. When no command is given display help for the list command
  -q, --quiet                              Do not output any message
  -V, --version                            Display this application version
      --ansi|--no-ansi                     Force (or disable --no-ansi) ANSI output
  -n, --no-interaction                     Do not ask any interactive question
      --no-warnings                        Skip global warnings, show command output only
  -v|vv|vvv, --verbose                     Increase the verbosity of messages: 1 for normal output, 2 for more verbose output and 3 for debug