As for your question: Yes, you can revoke user consent for all OAuth2 clients using the Ory SDK. This will automatically revoke all related access and refresh tokens. However, please note that this method should not be used to invalidate user sessions. Here is a code snippet for revoking user consent for all OAuth2 clients:

import { Configuration, OAuth2Api } from "@ory/client"  
  
const ory = new OAuth2Api(  
 new Configuration({  
 basePath: `https://${process.env.ORY_PROJECT_SLUG}.<http://projects.oryapis.com|projects.oryapis.com>`,  
 accessToken: process.env.ORY_API_KEY,  
 }),  
)  
  
export async function revokeConsent() {  
 const { data } = await ory.revokeOAuth2ConsentSessions({  
 subject: "some-user-id",  
 all: true,  
 })  
}

In this code,

subject

is the user-id for which you want to revoke the consent. The

all

parameter is set to

true

to revoke consent for all OAuth2 clients. Please note that if you are using access and refresh tokens as user sessions instead of browser cookies, you should revise your approach and usage of OAuth2.