Logout

Revoke the caller's current access token.

get_current_user authenticates the request (verifying the JWT and checking revocation status). We then look up the token's expiry from the principal cache — it is always present after get_current_user runs — and write the token hash to the revocation table.

The UI should also revoke the Clerk session so it is terminated at the identity-provider level.