# Your PDS data lives here, unless you manually changed it when setting up your PDS
$ cd /pds

# The oauth tokens live in account.sqlite3
# There's a bunch of tables in here, the one we are interested in is 'token'
# 
#   $ sqlite3 account.sqlite -header -column "SELECT * FROM token;"
#   id  did               tokenID       createdAt                 clientId                 
#   --  ----------------  ------------  ------------------------  ------------------------ 
#   0   did:plc:abcd1234  tok-abcd1234  2025-09-28T10:02:48.063Z  https://leaflet.pub/api/oauth/metadata 
#   1   did:plc:abcd1234  tok-zyxw9876  2025-09-28T10:02:48.063Z  https://tangled.org/oauth/client-metadata.json
#
# Deleting the relevant entry will revoke access to that client.
# Here I am going to delete the leaflet entry.

$ sqlite3 account.sqlite "DELETE FROM token WHERE clientId = 'https://leaflet.pub/api/oauth/metadata';"

# With that, leaflet no longer has write access to my PDS
# I also had to manually clear my browser cache for leaflet to recognize that it no longer
# had write access.
# If you want to use leaflet again, just sign in once more.