Sign in
Auth

Logout

Revoke all refresh tokens and bump token_version for the current user.

Logout invalidates the access JWT used for this call and all other active browser sessions.

API keys remain valid because they are independent of browser sessions. Password and role changes still revoke them.

A refresh cookie can authenticate logout after the access token expires. Cookie-authenticated requests require CSRF validation.

post/auth/logout/

Request

  • The document declares no server URL.
  • Auth: one of:
    • none
    • OAuth 2 (password, token URL /api/auth/login)
    • API key in header X-Api-Key
    • API key in query parameter api_key

Headers

X-CSRF-Tokenstring nullable

Double-submit CSRF token, enforced only when the refresh cookie is what authenticates the call. Echo the value of the geolens_csrf cookie issued alongside the refresh cookie. Callers presenting a refresh token in the request body do not send it.

Request body

refresh_tokenstring required

Response

Successful Response

Changes

No recorded changes to this operation across all 50 revisions of this API.