KOkobaltlabs
internal

Revoke Company Sessions

Revoke every active SuperTokens session for a company's users.

Used at the WorkOS cutover: WorkOS sessions live client-side and are unaffected, but a SuperTokens session survives a login_provider_type flip for up to the refresh-token lifetime (~6 days idle). Revoking forces the company's users back through /auth, where the email-first router sends them to their newly-assigned provider. Reversible — users simply sign in again.

post/internal/company/revoke-sessions

Request

  • Base URL
    https://api.kobaltlabs.com (the document declares no server; this is the origin it was published from)
  • URL
    https://api.kobaltlabs.com/internal/company/revoke-sessions
  • Auth
    none declared

Request body application/x-www-form-urlencoded

company_idstring uuid required

Response

Successful Response

users_targetedinteger required
sessions_revokedinteger required

Changes

No recorded changes to this operation across all 8 revisions of this API.