---
title: "Revoke OAuth 2.0 Consent Sessions of a Subject"
method: DELETE
path: "/admin/oauth2/auth/sessions/consent"
tags: ["oAuth2"]
---

# Revoke OAuth 2.0 Consent Sessions of a Subject

`DELETE /admin/oauth2/auth/sessions/consent`

This endpoint revokes a subject's granted consent sessions and invalidates all
associated OAuth 2.0 Access Tokens. You may also only revoke sessions for a specific OAuth 2.0 Client ID.

## Query parameters

- `subject` string
- `client` string
- `consent_request_id` string
- `all` boolean

## Response `204`

Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
typically 204.

## Other responses

- `default` — errorOAuth2

## Changes

- **2025-11-07** `f270bd3c7f35` — 2 info
  - added the new optional `query` request parameter `consent_request_id`
  - the `query` request parameter `subject` became optional
- **2022-10-27** `4505403da8d7` — 1 info
  - endpoint added
- **2022-02-16** `82d233540486` — 1 breaking
  - api path removed without deprecation

[Change history](https://skmtc.dev/ory/apis/ory-hydra-api/changes/admin/oauth2/auth/sessions/consent/delete.md)

---

[API](https://skmtc.dev/ory/apis/ory-hydra-api.md) · [All operations](https://skmtc.dev/ory/apis/ory-hydra-api/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ory/ory-hydra-api/revisions/ab053e716585/schema)