First off, I'll admit that I'm not even sure I'm going down the right path with the right questions. I've been thrown into the deep end as my company moves into GCP and am learning on the fly.
The situation I've got is a developer was able to use a token from another user to perform some work. What is really bad is the owner of the token left the company awhile ago. In admin.google.com I verified the user is suspended which shows me that our AD integration is working.
My assumption is the old user was issued a token somewhere with a very long and unacceptable time to live. Which leads me to two questions. The first is there a way I can find any and all tokens issued to this user? The second is if I'm going to be going down this rabbit hole, is there a way I can search for all long lived tokens?
I'm hoping for a gcloud solution that I can script out for formatting and any parsing I might need to do to get useable/human readable formatting without lots of extra inforamtion.