organization

Invalidate Tokens

Invalidate all JWT tokens for the current organization. This is considered a break-glass action and should be used only if tokens have been compromised. All tokens will be invalidated, including tokens on links, emails, and currently logged in sessions. API keys are not affected by this action. This action may take 60 seconds to propagate.

post/organization/invalidateTokens

Request

  • Base URL: https://api.mercoa.com
  • URL: https://api.mercoa.com/organization/invalidateTokens
  • Auth: HTTP bearer

Request body

sessionIdstring[]

Optional list of session IDs to invalidate. If not provided, all sessions will be invalidated.

Response

Successful response

Changes

No recorded changes to this operation across all 1 revision of this API.