Authentication

Logout

Logout — blacklist tokens and clear HttpOnly cookies.

If the blacklist write fails (e.g., Redis is down), we return 503 instead of pretending logout succeeded. The frontend should treat the pre-logout state as still-valid and retry. Silent swallowing here would mean a stolen token stays usable until JWT expiry (up to 24h) even though the user thinks they're logged out.

post/api/v1/auth/logout

Request

  • Base URL: https://app.aimrank.io (the document declares no server; this is the origin it was published from)
  • URL: https://app.aimrank.io/api/v1/auth/logout
  • Auth: none declared

Request body

refresh_tokenstring nullable

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 1 revision of this API.