ORory
frontend

Disable one of my sessions

Changed on

Calling this endpoint invalidates the specified session. The current session cannot be revoked. Session data are not deleted.

delete/sessions/{id}

Request

  • Base URL
    / (relative, and the document was published on a file host, not at the API’s origin)
  • URL
    /sessions/{id}
  • Auth
    none declared

Path parameters

idstring required

ID is the session's ID.

Headers

X-Session-Tokenstring

Set the Session Token when calling from non-browser clients. A session token has a format of MP2YWEMeM8MxjkGKpH4dqOQ4Q4DlSPaj.

Cookiestring

Set the Cookie Header. This is especially useful when calling this endpoint from a server-side application. In that scenario you must include the HTTP Cookie Header which originally was included in the request to your server. An example of a session in the HTTP Cookie Header is: ory_kratos_session=a19iOVAbdzdgl70Rq1QZmrKmcjDtdsviCTZx7m9a9yHIUS8Wa9T7hvqyGTsLHi6Qifn2WUfpAKx9DWp0SJGleIn9vh2YF4A16id93kXFTgIgmwIOvbVAScyrx7yVl6bPZnCx27ec4WQDtaTewC1CpgudeDV2jQQnSaCP6ny3xa8qLH-QUgYqdQuoA_LF1phxgRCUfIrCLQOkolX5nv3ze_f==.

It is ok if more than one cookie are included here as all other cookies will be ignored.

Response

Empty responses are sent when, for example, resources are deleted. The HTTP status code for empty responses is typically 204.

Changes

  • b6e5ffa30d4cRevision changes
    • info

      api operation id revokeSession removed and replaced with disableMySession

    • info

      api tag frontend added

    • info

      api tag v0alpha2 removed

    • info

      added the new optional header request parameter Cookie

    • info

      added the new optional header request parameter X-Session-Token

    • info

      removed the non-success response with the status

  • 028a4cf83c15Revision changes
    • info

      endpoint added