Appearance
Unlink an OAuth provider from the current user
POST
/users/unlink_identity
Removes an OAuth provider link (GitHub, LDAP, OIDC) from the current user's account. Requires the user's current password to confirm. The user must have local login credentials before unlinking to avoid being locked out. Available from the user profile page.
Authorizations
cookieAuth
Type
API Key (cookie: _vulcan_session)
or
tokenAuth
Personal access token authentication. Send via Authorization header: Authorization: Token vulcan_xxx. Tokens are SHA-256 hashed server-side (never stored in plaintext). Scopes: read (GET), write (mutations), admin (everything). Create tokens via Settings → API Tokens in the web UI.
Type
HTTP (token)
Request Body
application/json
JSON "current_password": "MyCurrentP@ssw0rd!", "provider": "github"
{
}
Responses
Provider unlinked
application/json
JSON "toast": { "title": "Provider unlinked.", "message": [ "GitHub identity removed from your account." ], "variant": "success" }
{
}