---
title: "Revoke user session"
method: POST
path: "/api/v1/sessions/{session_id}/revoke"
tags: ["Sessions"]
---

# Revoke user session

`POST /api/v1/sessions/{session_id}/revoke`

Immediately invalidates a specific user session by session ID, setting its status to 'revoked'. Once revoked, the session cannot be used for any future API requests or application access. Use this endpoint to implement session-level logout, force a user to reauthenticate on a specific device, or terminate suspicious sessions. The revocation is instantaneous and irreversible. Returns the revoked session details including the session ID, user ID, and the revocation timestamp.

## Path parameters

- `session_id` string, required

## Response `200`

Successfully revoked the session. Returns the revoked session details

- SessionsRevokeSessionResponse
  - `revoked_session` SessionsRevokedSessionDetails
    - `absolute_expires_at` string, date-time — The absolute expiration timestamp that was configured for this session before revocation. Represents the hard deadline regardless of activity.
    - `created_at` string, date-time — Timestamp indicating when the session was originally created before revocation.
    - `expired_at` string, date-time — Timestamp when the session was actually terminated. Set to the revocation time when the session is revoked.
    - `idle_expires_at` string, date-time — The idle expiration timestamp that was configured for this session before revocation. Represents when the session would have expired due to inactivity.
    - `last_active_at` string, date-time — Timestamp of the last recorded user activity in this session before revocation. Helps identify inactive sessions that were revoked.
    - `logout_at` string, date-time — Timestamp when the user explicitly logged out (if applicable). Null if the session was revoked without prior logout.
    - `session_id` string — Unique identifier for the revoked session. System-generated read-only field.
    - `status` string — Status of the session after revocation. Always 'revoked' since only active sessions can be revoked. Sessions that were already expired or logged out are not included in the revocation response.
    - `updated_at` string, date-time — Timestamp indicating when the session was last modified before revocation.
    - `user_id` string — Unique identifier for the user who owned this session.

---

[API](https://skmtc.net/scalekit/apis/scalekit-api-reference.md) · [All operations](https://skmtc.net/scalekit/apis/scalekit-api-reference/llms.txt) · [OpenAPI document](https://skmtc-service-staging.skmtc.workers.dev/v1/apis/scalekit/scalekit-api-reference/versions/a40d5d4650e5/schema)