sessions

Revoke one of the caller's own sessions by id

Revoke one of the caller's own sessions, by id, ending a single session without touching the caller's others. Self-scoped by a gateway ownership check: the gateway fetches the session and confirms the caller owns it before forwarding the revoke to the control plane. A session that is not the caller's, absent, or a malformed id all answer 404. The control plane answers with the session as it read it before revoking, so a session that was active still shows status: "active" and no revoked_at; re-read the session for its revoked state.

post/registry/v1/users/sessions/{session_id}/revoke

Request

  • Base URL: https://api.atlan.com (the document declares no server; this is the origin it was published from)
  • URL: https://api.atlan.com/registry/v1/users/sessions/{session_id}/revoke
  • Auth: HTTP bearer

Path parameters

session_idstring required

The control-plane session id (session_<21>).

Response

The session was revoked; the body is the session as read before the revoke, not its revoked state.

created_atstring date-time required

When the session started.

idstring required

The session id.

ipstring

The client address the session was last seen from, when known.

issued_via'magic_otp' | 'google_sso' | 'enterprise_sso' | 'oidc_client' | 'service' | 'org_switch' required

How a session was signed in.

last_seen_atstring date-time required

When the session was last used.

revoked_atstring date-time

When the session was revoked, if it was.

status'active' | 'revoked' required

Whether a session is still usable.

user_agentstring

The client's user agent, when known.

user_idstring required

The user the session belongs to.

Changes

No recorded changes to this operation across all 1 revision of this API.