Revoke the session behind a refresh token.

POST

/logout

const url = 'https://session-api.sudomimus.com/logout';
const options = {
  method: 'POST',
  headers: {'Content-Type': 'application/json'},
  body: '{"refreshToken":"example"}'
};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request POST \
  --url https://session-api.sudomimus.com/logout \
  --header 'Content-Type: application/json' \
  --data '{ "refreshToken": "example" }'

Revokes the single session identified by the supplied refresh token. Any genuine signed version whose sid, aud, jti, and rotationVersion bind to that session may authorize the revocation; accepting an older genuine version here does not make it refreshable. No client-auth JWT is required. The operation is idempotent.

Request Body^required

application/json

object

refreshToken

required

Any genuine signed refresh-token version for the session to revoke.

string

Example^generated

{
  "refreshToken": "example"
}

Responses

200

Revocation outcome.

application/json

object

revoked

required

boolean

Example^generated

{
  "revoked": true
}

default

Error response.

application/json

Error response body. A missing, malformed, or structurally invalid JSON request body returns InvalidBody. Documented status-only failures have an empty response body.

object

reason

required

string

message

string

Example^generated

{
  "reason": "example",
  "message": "example"
}

Revoke the session behind a refresh token.

Request Bodyrequired

Examplegenerated

Responses

200

Examplegenerated

default

Examplegenerated

Request Body^required

Example^generated

Example^generated

Example^generated