tenants

Revoke User Sessions

Force-logout a user from every OIDC client (all copilots + pozeidon).

Bumps session_epoch and revokes the user's outstanding refresh-token families. The OIDC refresh path (oauth_provider/grants.py) re-checks the live epoch on every refresh, so the next refresh from any client is denied (session revoked) — no copilot-side coordination needed. The user's current access token still lives out its short TTL.

post/api/tenants/{tenant_id}/users/{user_id}/revoke-sessions

Request

  • Base URL: https://pozeidon.ai (the document declares no server; this is the origin it was published from)
  • URL: https://pozeidon.ai/api/tenants/{tenant_id}/users/{user_id}/revoke-sessions
  • Auth: none declared. Required headers: x-admin-secret

Path parameters

tenant_idstring required
user_idstring uuid required

Headers

x-admin-secretstring required

Response

Successful Response

unknown required

Changes

No recorded changes to this operation across all 2 revisions of this API.