feat(api): Add support for group service account access tokens.

Rolf Offermanns · Rolf Offermanns · commit 6e8d054b4834 · 2025-01-29T10:12:42.000+01:00
Fixes #2946
diff --git a/gitlab/v4/objects/service_accounts.py b/gitlab/v4/objects/service_accounts.py
@@ -1,12 +1,21 @@
 from gitlab.base import RESTManager, RESTObject
-from gitlab.mixins import CreateMixin, DeleteMixin, ListMixin, ObjectDeleteMixin
-from gitlab.types import RequiredOptional
+from gitlab.mixins import (
+    CreateMixin,
+    DeleteMixin,
+    ListMixin,
+    RotateMixin,
+    ObjectDeleteMixin,
+    ObjectRotateMixin,
+)
+from gitlab.types import RequiredOptional, ArrayAttribute
 
 __all__ = [
     "ServiceAccount",
     "ServiceAccountManager",
     "GroupServiceAccount",
     "GroupServiceAccountManager",
+    "GroupServiceAccountAccessToken",
+    "GroupServiceAccountAccessTokenManager",
 ]
 
 
@@ -33,3 +42,18 @@ class GroupServiceAccountManager(CreateMixin, DeleteMixin, ListMixin, RESTManage
     _create_attrs = RequiredOptional(
         optional=("name", "username"),
     )
+
+
+class GroupServiceAccountAccessToken(ObjectRotateMixin, RESTObject):
+    pass
+
+
+class GroupServiceAccountAccessTokenManager(CreateMixin, RotateMixin, RESTManager):
+    _path = "/groups/{group_id}/service_accounts/{user_id}/personal_access_tokens"
+    _obj_cls = GroupServiceAccountAccessToken
+    _from_parent_attrs = {"group_id": "id", "user_id": "user_id"}
+    _create_attrs = RequiredOptional(
+        required=("name", "scopes"),
+        optional=("expires_at",),
+    )
+    _types = {"scopes": ArrayAttribute}
