---
title: "Revoke OAuth 2.0 Consent Sessions of a Subject"
method: DELETE
path: "/admin/oauth2/auth/sessions/consent"
tags: ["oAuth2"]
---

# Revoke OAuth 2.0 Consent Sessions of a Subject

`DELETE /admin/oauth2/auth/sessions/consent`

This endpoint revokes a subject's granted consent sessions and invalidates all
associated OAuth 2.0 Access Tokens. You may also only revoke sessions for a specific OAuth 2.0 Client ID.

## Query parameters

- `subject` string
- `client` string
- `consent_request_id` string
- `all` boolean

## Response `204`

Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is
typically 204.

## Other responses

- `default` — errorOAuth2

## Changes

- **2025-02-20** `d42439ca4d90` — 1 warning, 1 info
  - deleted the `query` request parameter `consent_challenge_id`
  - added the new optional `query` request parameter `consent_request_id`
- **2025-02-11** `504aaddc7c70` — 2 info
  - added the new optional `query` request parameter `consent_challenge_id`
  - the `query` request parameter `subject` became optional
- **2022-10-11** `cec56a3dc789` — 1 breaking, 1 warning
  - the `query` request parameter `subject` became required
  - deleted the `query` request parameter `consent_request_id`

[Change history](https://skmtc.dev/ory/apis/ory-hydra/changes/admin/oauth2/auth/sessions/consent/delete.md)

---

[API](https://skmtc.dev/ory/apis/ory-hydra.md) · [All operations](https://skmtc.dev/ory/apis/ory-hydra/llms.txt) · [OpenAPI document](https://skmtc-service-production.skmtc.workers.dev/v1/apis/ory/ory-hydra/revisions/a302a90a0e8a/schema)