---
title: "End the cookie session"
method: POST
path: "/auth/logout"
tags: ["auth"]
---

# End the cookie session

`POST /auth/logout`

Clears the `__Host-dre-session` cookie. Always `204`, whether or not a session was present — a client can call it to recover from an expired or unreadable session. Takes no body and needs no CSRF token.

Local logout only: a bearer JWT already issued to a client stays valid until it expires. There is no server-side revocation.

## Response `204`

Session cookie cleared

## Other responses

- `403` — Origin not allowed or blocked Sec-Fetch-Site

---

[API](https://skmtc.dev/dre/apis/dre-api.md) · [All operations](https://skmtc.dev/dre/apis/dre-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/dre/dre-api/revisions/5d14beb9482b/schema)