v1

latestOpenAPI 3.0.3MIT2026-07-176638100.8 KB

Log out current user

If a refresh-token is supplied, it will be revoked as part of logging the user out. If SECURITY_REFRESH_TOKEN_COOKIE_NAME is configured, the refresh token (as well as the cookie) will be deleted as part of logout. If SECURITY_LOGOUT_CSRF is enabled, a valid CSRF token must be provided and an error can be returned if the token is invalid.

post/logout

Request body

refresh_tokenstring

Response

Logout response

Example response

{
  "meta": {
    "code": 200
  }
}