Self-rotate endpoint for group access tokens returns 401

Everyone can contribute. Help move this issue forward while earning points, leveling up and collecting rewards.

• Close this issue

Summary

Self-rotate endpoint for group access tokens returns Unauthorized 401, when it should be returning 200 OK.

Steps to reproduce

Make the following curl call:

curl --request POST \
  --header "PRIVATE-TOKEN: {token}" \
  --url "https://{host}/api/v4/groups/{group_id}/access_tokens/self/rotate"

What is the current bug behavior?

The self rotate endpoint returns a 401.

What is the expected correct behavior?

The self rotate endpoint should be returning 200.