---
title: "Revoke app user sessions"
method: POST
path: "/v1/spaces/{spaceId}/users/{userId}/sessions/revoke"
tags: ["Spaces"]
---

# Revoke app user sessions

`POST /v1/spaces/{spaceId}/users/{userId}/sessions/revoke`

## Request

- Base URL: `https://api.spacefast.com`
- URL: `https://api.spacefast.com/v1/spaces/{spaceId}/users/{userId}/sessions/revoke`
- Auth: one of:
  - HTTP bearer
  - API key in cookie `__Host-better-auth.session_token`
  - OAuth 2 (authorization code, authorization URL `https://api.spacefast.com/v1/auth/oauth2/authorize`, token URL `https://api.spacefast.com/v1/auth/oauth2/token`; client credentials, token URL `https://api.spacefast.com/v1/auth/oauth2/token`, scopes: `spaces:write`)

Signs one visitor account out of this Space's app. Pass `sessionId` from listSpaceUserSessions to end one session, or omit it to end all of the account's sessions. The person can sign in again unless the account is suspended. App accounts sign in to the published Space only; they never grant team or Space access. Requires permission to manage the Space.

## Path parameters

- `spaceId` string, required
- `userId` integer, required

## Request body

- object
  - `sessionId` string

## Response `200`

Response for status 200

- object
  - `$schema` string, uri: Canonical JSON Schema URL for this response body. The server also sends it in the `Link: rel="describedby"` response header.
  - `data` object, required
    - `revoked` true, required

## Other responses

- `default`: Problem details (RFC 9457). Any 4xx/5xx response is one `application/problem+json` document.

---

[API](https://skmtc.dev/spacefast/apis/spacefast-api.md) · [All operations](https://skmtc.dev/spacefast/apis/spacefast-api/llms.txt) · [OpenAPI document](https://skmtc.dev/spacefast/apis/spacefast-api/revisions/bd165bc7c983?raw)