Logout and invalidate refresh token

POST

/v1/auth/logout

Invalidates the current session. Accepts optional refresh_token in body to revoke refresh token server-side. Requires Bearer access token. Returns 204.

Authentication: Bearer JWT (user session).

Request

Authorization

JWT Bearer

Add the parameter

Authorization

to Headers

Example:

Authorization: ********************

Responses

🟢204

No content

This response does not have a body.

🟠400BadRequest

🟠401Unauthorized

🟠403Forbidden

🟠404NotFound

🟠409Conflict

🔴500InternalError

Request Example

Shell

JavaScript

Java

Swift

curl --location --request POST '/v1/auth/logout' \
--header 'Authorization: Bearer <token>'

Response Example

400 - Example 1

{
    "type": "string",
    "title": "string",
    "status": 0,
    "detail": "string",
    "code": "string"
}

Modified at 2026-06-23 04:24:01

Verify MFA during login