Log out current user

Changed on

If a refresh-token is supplied, it will be revoked as part of logging the user out. If SECURITY_REFRESH_TOKEN_COOKIE_NAME is configured, the refresh token (as well as the cookie) will be deleted as part of logout. If SECURITY_LOGOUT_CSRF is enabled, a valid CSRF token must be provided and an error can be returned if the token is invalid.

post/logout

Request

  • The document declares no server URL.
  • Auth
    none declared

Request body

refresh_tokenstring

Response

Logout response

Example response

{
  "meta": {
    "code": 200
  }
}

Changes

    • info

      added the media type text/html for the response with the status

    • info

      added the non-success response with the status

    • info

      added optional request body

    • info

      added the non-success response with the status