disappearing Personal Access Tokens

[Tony Rice]

We are getting reports of personal access tokens disappearing from our on-prem installation of Jira Data Center

Has anyone experienced anything like this?  Any pointers on what to look for in logs?

Since it's only a single user having this problem,I'm wondering if they are inadvertently removing these tokens themselves. While there is an API endpoint for viewing your tokens and creating a new one, AFAIK there isn't one for removing tokens and that can only be done through the Profile->Personal Access Tokens page and 

I'd like to keep an eye on tokens system-wide to find any patterns to this behavior. I'm aware of the  System->Administering personal access tokens page that provides this information.  Is there an API endpoint I can reach out to for similar information (info on all active tokens).

[Brant Schroeder]

@Tony Rice If you are having a single user that is having this issue have you checked to see if they are using incognito mode in their browser or clearing cache when the browser closes.  This is the most common issue that causes users to have this.  

[Tony Rice]

I wasn't very clear.  The tokens are disappearing from the list of available tokens.  This is happening for both the user's and the administrator's view of tokens.

This doesn't appear to be a session based problem.

[Brant Schroeder]

@Tony Rice How is the PAT being created? (API or APP)

[Tony Rice]

App

Not sure why that matters.

[Brant Schroeder]

@Tony Rice When a PAT via the API you set an expiration.    Since the user is setting it up in the app do you know if they are setting as their expiration date?