DELETE/auth/sessions/{sessionId}
Destroy a user session
Operation auth.sessions.destroy
Description
Signs out one of the caller's own sessions, for example a lost device. A session id that is unknown or belongs to another user returns 404.
Authentication
Requires a signed-in session: the client sends its session token as a bearer token in the Authorization header.
Parameters
| Name | In | Type | Details |
|---|---|---|---|
sessionId | path | string | required
|
Responses
200 OK
application/jsonDestroySessionResponse
Confirms that a session was signed out.
1 field
messagestringrequired- always
ok
- always
Other fields are allowed.
Other responses
| Status | Meaning | Body |
|---|---|---|
| 400 | Bad Request |
|
| 401 | Unauthorized |
|
| 404 | Not Found |
|
| 500 | Internal Server Error |
|
| 503 | Service Unavailable |
|