Sign out
POST/v1/user/auth/signout
Revokes the presented refresh token's family, signing out every device fed by it.
global: "true" is rejected with 400. Sessions here are this issuer's own refresh
families, which a provider-side sign-out does not touch, so an all-devices request cannot be
honoured and is refused rather than answered with a success that ended nothing. Sign out each
session with its own refresh token.
Request
Responses
- 200
- 400
- 401
Signed out.
Refresh token missing, or an all-devices signout was requested.
Unauthorized - Invalid or missing authentication