Auth

End the browser session (programmatic sign-out)

Programmatic sign-out targeted by the @run402/functions auth.sessions.endResponse() helper. Served on the tenant host. NOT behind apikey and NOT CSRF-gated: the session cookie is SameSite=Lax, so a cross-site POST never carries it. Best-effort revokes the session carried in the __Host-Http-r402_session cookie when present, and always returns a clear-cookie Set-Cookie. Idempotent — a missing/invalid cookie still returns ok with no session-existence oracle.

post/auth/v1/sessions/end

Request

  • Base URL: https://api.run402.com
  • URL: https://api.run402.com/auth/v1/sessions/end
  • Auth: none required

Response

Signed out; the session cookie is cleared.

okboolean

Example response

{
  "ok": true
}

Changes

No recorded changes to this operation across all 1 revision of this API.