Managing Subscriptions

The API Publisher provides the "Subscriptions" window to holistically view all subscriptions of APIs created by a particular user.

1. Log in to WSO2 API Publisher with a user who has been assigned the "creator" role. For more information on creating users and assigning roles, refer to section User Management.

2. Once logged in, click on the "Subscriptions" menu to open the "Subscriptions" window.

• Users: Usernames of users who have subscribed to the API through the API Store. For instructions on subscribing, refer to Subscribing to an API.
• Application: An application is a logical collection of one or more APIs, and is required when subscribing to an API. For more information on applications, refer to Subscribing to an API.
• Access Token: This is the API key generated when subscribing to an API to enable access to the API. For more information on API Keys, refer to Subscribing to an API.
• Token Status: An access token's status can be either "ACTIVE" or "REVOKED". For more information, refer to Revoking an Access Token.
  
• Subscribed APIs: List of all APIs a given user is subscribed to on a given application. Since API keys are generated at the application-level and valid for all APIs which are associated to an application, all APIs subscribed through the same application can be accessed with a single API key.

Revoking an Access Token

The API creator can revoke an access token, disabling access to all APIs subscribed to by a user through a given application. API keys are generated at the application-level and valid for all APIs which are associated with an application. Therefore, when an access token of a given application of a selected user is revoked, the user can no longer subscribe to APIs through that application. The user will also be unsubscribed from all APIs associated with that application. He can subscribe to those APIs again through a different application.

Follow the instructions below to revoke access tokens.

1. Log in to WSO2 API Publisher with a user who has been assigned the "creator" role and click the "Revoke Tokens" menu.

2. Provide the API key and click "Search". The API key associated with an application can be taken from the "Subscriptions" window discussed above.

3. If the key exists, it will be listed with subscriber details. Verify the details and click "Revoke".