feat(api): Add support for group service account access tokens.

Rolf Offermanns · JohnVillalovos · commit b3dd089ddd83 · 2025-04-17T09:26:52.000-07:00
Fixes #2946
diff --git a/gitlab/v4/objects/service_accounts.py b/gitlab/v4/objects/service_accounts.py
@@ -1,25 +1,32 @@
 from gitlab.base import RESTObject
-from gitlab.mixins import CreateMixin, DeleteMixin, ListMixin, ObjectDeleteMixin
-from gitlab.types import RequiredOptional
+from gitlab.mixins import (
+    CreateMixin,
+    DeleteMixin,
+    ListMixin,
+    ObjectDeleteMixin,
+    ObjectRotateMixin,
+    RotateMixin,
+)
+from gitlab.types import ArrayAttribute, RequiredOptional
 
 __all__ = [
     "ServiceAccount",
     "ServiceAccountManager",
     "GroupServiceAccount",
     "GroupServiceAccountManager",
+    "GroupServiceAccountAccessToken",
+    "GroupServiceAccountAccessTokenManager",
 ]
 
 
 class ServiceAccount(RESTObject):
     pass
 
 
-class ServiceAccountManager(CreateMixin, ListMixin, RESTManager):
+class ServiceAccountManager(CreateMixin[ServiceAccount], ListMixin[ServiceAccount]):
     _path = "/service_accounts"
     _obj_cls = ServiceAccount
-    _create_attrs = RequiredOptional(
-        optional=("name", "username", "email"),
-    )
+    _create_attrs = RequiredOptional(optional=("name", "username", "email"))
 
 
 class GroupServiceAccount(ObjectDeleteMixin, RESTObject):
@@ -35,3 +42,20 @@ class GroupServiceAccountManager(
     _obj_cls = GroupServiceAccount
     _from_parent_attrs = {"group_id": "id"}
     _create_attrs = RequiredOptional(optional=("name", "username"))
+
+
+class GroupServiceAccountAccessToken(ObjectRotateMixin, RESTObject):
+    pass
+
+
+class GroupServiceAccountAccessTokenManager(
+    CreateMixin[GroupServiceAccountAccessToken],
+    RotateMixin[GroupServiceAccountAccessToken],
+):
+    _path = "/groups/{group_id}/service_accounts/{user_id}/personal_access_tokens"
+    _obj_cls = GroupServiceAccountAccessToken
+    _from_parent_attrs = {"group_id": "id", "user_id": "user_id"}
+    _create_attrs = RequiredOptional(
+        required=("name", "scopes"), optional=("expires_at",)
+    )
+    _types = {"scopes": ArrayAttribute}
