diff --git a/internal/api/client/tokens/tokeninvalidate.go b/internal/api/client/tokens/tokeninvalidate.go index eab77cc04..e705e2635 100644 --- a/internal/api/client/tokens/tokeninvalidate.go +++ b/internal/api/client/tokens/tokeninvalidate.go @@ -73,10 +73,9 @@ func (m *Module) TokenInvalidatePOSTHandler(c *gin.Context) { return } - if authed.Account.IsMoving() { - apiutil.ForbiddenAfterMove(c) - return - } + // Note that we don't perform a move check, + // as even moved accounts should be able to + // invalidate their old tokens. if _, err := apiutil.NegotiateAccept(c, apiutil.JSONAcceptHeaders...); err != nil { apiutil.ErrorHandler(c, gtserror.NewErrorNotAcceptable(err, err.Error()), m.processor.InstanceGetV1)