Users

Revoke a user grant

Revoke a specific grant and its associated token chain by grant ID. Also removes the matching session authorization entry for this grant from the related active session. The grant must belong to the user.

delete/api/users/{userId}/grants/{grantId}

Request

  • Base URL: https://[tenant_id].logto.app
  • URL: https://[tenant_id].logto.app/api/users/{userId}/grants/{grantId}
  • Auth: OAuth 2 (client credentials, token URL /oidc/token, scopes: all)

Path parameters

userIdstring required

The unique identifier of the user.

grantIdstring required

The unique identifier of the grant.

Response

Grant revoked successfully. If the grant already expired, this endpoint returns success without token-chain changes.

Changes

No recorded changes to this operation across all 8 revisions of this API.