Maintenance

Invalidate a single session

Invalidates the session whose HMAC-obfuscated token is supplied. The caller's own session cannot be invalidated this way. The CSRF secret must have been issued by GET /v1/maintenance/_sessions within the last 15 minutes — otherwise this endpoint returns 403 and the client must re-list to refresh.

delete/api/v1/maintenance/_sessions/{token}

Path parameters

tokenstring required

HMAC-obfuscated session token returned by GET /_sessions

Response

Session invalidated

entitystring
i18nMessagesMapobject
permissionsstring[]

Changes

No recorded changes to this endpoint across all 1 revision of this API.