PApaywithlocus
End users

Revoke an end-user token

Revokes one outstanding end-user token by its durable jti. Revocation takes effect immediately on the next use, which is the only way to cut a leaked token short — bearer tokens are otherwise replayable until they expire.

delete/credits/end-users/{externalUserId}/tokens/{tokenId}

Request

  • Base URL
    https://api.paywithlocus.com/api
  • URL
    https://api.paywithlocus.com/api/credits/end-users/{externalUserId}/tokens/{tokenId}
  • Auth
    • HTTP bearer
    • or HTTP bearer

Path parameters

externalUserIdstring required

Case-sensitive immutable ID in the tenant namespace. Prefer an identity-provider subject, not an email address.

tokenIdstring required

Token record id from GET /credits/end-users/{externalUserId}/tokens.

Request body

reasonstring

Recorded on the credential audit event.

Response

Revoked.

Changes

No recorded changes to this operation across all 1 revision of this API.