v51

latestOpenAPI 3.0.1raw.githubusercontent.com2026-08-0118684573.2 KB
Session Authentication

Logging out / Revoking an App User

Logging out is not strictly necessary for Web Users; all sessions expire 24 hours after they are created. But it can be a good idea, in case someone else manages to steal your token. It is also the way Public Link and App User access are revoked. To do so, issue a DELETE request to that token resource.

Revoking an App User

The token associated with an App User is actually just its Session Token. As a result, although an App User Token can uniquely be used as a URL prefix as described here, the session associated with it can be revoked in exactly the same way a session is logged out, by issuing a DELETE request to its Session resource.

Note, however, that an App User cannot revoke itself; a User must perform this action.

delete/v1/sessions/{token}

Path parameters

tokenstring required

The session bearer token, obtained at login time.

Response

OK

successboolean required

Example response

{
  "success": true
}