---
title: "Logout admin dashboard session"
method: POST
path: "/api/auth/admin/logout"
tags: ["Admin"]
---

# Logout admin dashboard session

`POST /api/auth/admin/logout`

Clears the dashboard-only `insforge_admin_refresh_token` cookie.

If a valid admin refresh cookie is present, the request must include the `X-CSRF-Token`
header returned from admin login, admin session exchange, or admin refresh. Missing, expired,
invalid, or wrong-session-type admin refresh cookies are cleared idempotently and still return
success.

## Headers

- `X-CSRF-Token` string

## Response `200`

Logged out successfully. Also returned when the admin refresh cookie is missing, expired, invalid, or the wrong session type.

- object
  - `success` boolean
  - `message` string

## Other responses

- `403` — Invalid or missing CSRF token for a valid admin refresh cookie

---

[API](https://skmtc.net/insforge/apis/insforge-authentication-api.md) · [All operations](https://skmtc.net/insforge/apis/insforge-authentication-api/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/insforge/insforge-authentication-api/versions/a935bb49f932/schema)