Removing granted access to an Application is no longer working

Question

When you visit your profile on the tab Settings you'll find the option "Applications".

It lists the Applications you've granted access. Each Application has a button at the right hand side labelled: 'Remove'.

The expectation is that when you click that button two things happen:

• the granted access is revoked, aka the access_token is no longer valid
• the application is removed from the list.

Based on observation I assume none of the mentioned actions happen, simply because clicking the button doesn't send any calls to the server. I could live with the application not being removed from my list but I'm less happy with my granted access not being revoked. If I want to revoke access because an app has gone rogue I rather not have to first file a bug or submit a ticket.

Just in case this is a browser issue: I'm on Chrome/Win10, tested with all Userscripts disabled.

Can this be looked at and fixed, if possible with some priority?

Answer 1

We just looked up the definition of "prioritize" and it looks like we thought it meant something else! Sorry about that, this should have been addressed far quicker due to the nature of the bug.

Anyhow, I'm happy to announce this has finally been addressed and I was able to remove the authentication for the iOS app (which has been long dead) from my account.

---

Update 2022-05-09: A bug existed where whenever a user that belonged to one or more Teams tried accessing their authorized applications from a network site, they'd get a 500 error. For a bit of context, network sites have little to no access about Teams data for security and privacy reasons. So when a network site was trying to list out applications, it would try checking to see what Teams these applications had access to it. But because network sites don't know about Teams unless explicitly requested, it couldn't list out applications properly leading to this 500 error.

This has been fixed so network sites can request the minimum amount of data about Teams (i.e. teams and a URL), so that it can list those teams under the respective applications.

---

Outdated: Semi-related to this bug, if you receive a 500 error (pictured below) when trying to access your application settings, it's a known bug that needs to be fixed.

A temporary workaround is to manage your applications via Stack Overflow and not another site. This server error occurs whenever a user tries to manage their applications via a non-Stack Overflow site and belongs to any Teams.

Answer 2

As of now (until the devs get time to work on this), following code will assist in removing an application from your profile > settings > applications.

Extending the code provided by @Makyen, execute the following piece of code on your console for the basic version (executes deauth for respective app).

$.each($("#mainbar a[href='#']:contains('Remove')"), function(index, node) {
    $(node).attr('href', 'javascript:;');
    var userId = StackExchange.options.user.userId;
    $(node).click(function() {
        var params = {
            fkey: StackExchange.options.user.fkey,
            appId: $(this).attr('id').replace('app-', '')
        };
        $.post("/users/apps/de-authorize/" + userId, params, function() {
            $(node).parent().parent().parent().remove();
        });
    });
});

The fancy version is originally posted here at https://pastebin.com/7QZas8WK the one with the initial state that says: "You have no authorized applications". But also posted below:

// The fancy version
var appCount = 0;
var emptyBlock = '<div class="s-empty-state p48 bg-black-025 bar-md ba bc-black-075 ta-center"><svg aria-hidden="true" class="mb24 svg-spot spotEmptyLg" width="96" height="96" viewBox="0 0 96 96"><path d="M8 12a4 4 0 014-4h79a4 4 0 014 4v18a4 4 0 01-4 4H12a4 4 0 01-4-4V12zm0 33a4 4 0 014-4h79a4 4 0 014 4v18a4 4 0 01-4 4H12a4 4 0 01-4-4V45zM4 78.63a1.5 1.5 0 01-3 0V75.5A4.5 4.5 0 015.5 71h2.44a1.5 1.5 0 010 3H5.5c-.83 0-1.5.67-1.5 1.5v3.13zm9.27-6.13c0-.83.68-1.5 1.5-1.5h4.88a1.5 1.5 0 010 3h-4.88a1.5 1.5 0 01-1.5-1.5zm11.72 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 110 3h-4.88a1.5 1.5 0 01-1.5-1.5zm11.71 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 110 3H38.2a1.5 1.5 0 01-1.5-1.5zm11.72 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 010 3h-4.88a1.5 1.5 0 01-1.5-1.5zm11.71 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 010 3h-4.88a1.5 1.5 0 01-1.5-1.5zm11.72 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 010 3h-4.88a1.5 1.5 0 01-1.5-1.5zm11.71 0c0-.83.67-1.5 1.5-1.5h2.44a4.5 4.5 0 014.5 4.5v3.13a1.5 1.5 0 01-3 0V75.5a1.5 1.5 0 00-1.5-1.5h-2.44a1.5 1.5 0 01-1.5-1.5zM2.5 85.88c.83 0 1.5.67 1.5 1.5v3.15A1.5 1.5 0 005.5 92h2.44a1.5 1.5 0 010 3H5.4A4.5 4.5 0 011 90.5v-3.13c0-.82.67-1.5 1.5-1.5zm88 0c.83 0 1.5.67 1.5 1.5v3.12a4.52 4.52 0 01-4.5 4.5h-2.44a1.5 1.5 0 010-3h2.44a1.5 1.5 0 001.5-1.5v-3.13c0-.82.67-1.5 1.5-1.5zM13.27 93.5c0-.83.68-1.5 1.5-1.5h4.88a1.5 1.5 0 010 3h-4.88a1.5 1.5 0 01-1.5-1.5zm11.72 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 010 3h-4.88a1.5 1.5 0 01-1.5-1.5zm11.71 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 110 3H38.2a1.5 1.5 0 01-1.5-1.5zm11.72 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 010 3h-4.88a1.5 1.5 0 01-1.5-1.5zm11.71 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 010 3h-4.88a1.5 1.5 0 01-1.5-1.5zm11.72 0c0-.83.67-1.5 1.5-1.5h4.88a1.5 1.5 0 010 3h-4.88a1.5 1.5 0 01-1.5-1.5z" opacity=".2"></path><path d="M14.5 18a2.5 2.5 0 100-5 2.5 2.5 0 0 0 0 5zm8.5-2.5c0-.83.67-1.5 1.5-1.5h57a1.5 1.5 0 010 3h-57a1.5 1.5 0 01-1.5-1.5zM5.5 1A4.5 4.5 0 001 5.5v20A4.5 4.5 0 005.5 30h81a4.5 4.5 0 004.5-4.5v-20A4.5 4.5 0 0086.5 1h-81zM4 5.5C4 4.67 4.67 4 5.5 4h81c.83 0 1.5.67 1.5 1.5v20c0 .83-.67 1.5-1.5 1.5h-81A1.5 1.5 0 014 25.5v-20zm13 43a2.5 2.5 0 11-5 0 2.5 2.5 0 0 1 5 0zm7.5-1.5a1.5 1.5 0 000 3h57a1.5 1.5 0 000-3h-57zm-19-13A4.5 4.5 0 001 38.5v20A4.5 4.5 0 005.5 63h81a4.5 4.5 0 004.5-4.5v-20a4.5 4.5 0 00-4.5-4.5h-81zM4 38.5c0-.83.67-1.5 1.5-1.5h81c.83 0 1.5.67 1.5 1.5v20c0 .83-.67 1.5-1.5 1.5h-81A1.5 1.5 0 014 58.5v-20z"></path></svg><div>You have no authorized applications</div></div>';
$.each($("#mainbar a[href='#']:contains('Remove')"),function(index, node){
    $(node).attr('href','javascript:;');
    appCount++;
    var userId = StackExchange.options.user.userId;
    $(node).click(function(){
        var params = {
            fkey: StackExchange.options.user.fkey,
            appId: $(this).attr('id').replace('app-','')
        };
        
        $.post("/users/apps/de-authorize/" + userId,params,function(){
            appCount--;
            if (appCount == 0) {
                $(node).parent().parent().parent().parent().append(emptyBlock);
            }
            $(node).parent().parent().parent().remove();
        });
    });
});

Thanks to @A.L for suggesting to add this as an answer.