Skip to content
LogoLogo

Revoke one of the current user's sessions

Revoke one of the current user's sessions

DELETE/api/v1/me/sessions/{session_id}

Revokes a single session belonging to the caller. Revoking the calling session is permitted, and the response then also expires the session and CSRF cookies.

Revoking an already-revoked session answers 204: the operation is idempotent, because a client retrying a lost response must not be told its device is still signed in. A session belonging to another user answers 404, never 403, so the endpoint cannot confirm that a session identifier exists.

Path Parameters

session_idRequired
string <uuid>
Example0198ac5e-f9b7-7000-8000-000000000001

Header Parameters

X-CSRF-TokenRequired
string·min 43·max 43

Session-bound CSRF token. It must exactly match the __Host-assign_csrf cookie sent with the request.

Responses

Authentication · Conventions and errors · API guides · Resource reference