instance

De-allowlist an origin and kill every session bound to it.

THE KILL SWITCH. Removing the entry and revoking every workspace session bound to that origin happen in ONE transaction, so there is no window in which the origin is de-allowlisted and its sessions still authenticate. New handoffs refuse at the transaction, not merely at CORS.

The origin travels in the REQUEST BODY and never as a path parameter, deliberately: a path parameter naming an origin is one review lapse away from a path parameter naming a target, which is the proxy shape this contract refuses by construction.

delete/api/v1/instance/workspace-origins

Request

  • Base URL: / (relative, and the document was published on a file host, not at the API’s origin)
  • URL: /api/v1/instance/workspace-origins
  • Auth: HTTP bearer

Request body

originstring required

Response

Removed, with the number of sessions the same transaction killed.

originstring required
sessions_revokedinteger required

Workspace sessions killed by the SAME transaction. This is what makes de-allowlisting a kill switch rather than a headers change.

Changes