My account

Revoke a session by ID

Revoke a specific user session by its ID, optionally revoking target associated grants and tokens. A logto-verification-id in header is required for revoking sessions.

delete/api/my-account/sessions/{sessionId}

Request

  • Base URL: https://[tenant_id].logto.app
  • URL: https://[tenant_id].logto.app/api/my-account/sessions/{sessionId}
  • Auth: OAuth 2 (client credentials, token URL /oidc/token, scopes: all)

Path parameters

sessionIdstring required

The unique identifier of the session.

Query parameters

revokeGrantsTarget'all' | 'firstParty'

Optional target for revoking associated grants and tokens. 'all' revokes grants for every application authorized by this session. 'firstParty' revokes only first-party app grants; third-party app grants remain active. If omitted, grants remain active when the session authorizations include offline_access; otherwise they are revoked.

Response

The session was revoked successfully.

Changes

No recorded changes to this operation across all 8 revisions of this API.