Skip to main content

End a session.

POST 
/api/auth/logout

The bearer token is not revoked, because it cannot be: it is a signature, and nothing we hold can un-sign it. It expires in SESSION_TTL_MINUTES, and the refresh token that would have renewed it is gone, so the session ends.

Request​

Responses​

how many refresh tokens were revoked