Revoke all authentication sessions for current user (logout everywhere).

Authentication: JWT token required Access: Revokes all sessions for current authenticated user Purpose: Complete logout from all devices and applications

Request: No request body required

Success Response Schema:

{
  "message": "Successfully revoked 3 sessions"
}

Revocation Process:

• Identifies all active sessions for current user
• Invalidates all session tokens immediately
• Removes all sessions from active sessions list
• Logs bulk revocation event for security audit
• Includes current session (user will need to re-authenticate)

Use Cases:

• Emergency security response (suspected account compromise)
• Complete logout when changing passwords
• Privacy protection when using shared/public computers
• Account cleanup and security hygiene

Security Features:

• Immediate invalidation of all tokens
• Forces re-authentication on all devices
• Comprehensive security reset
• Audit logging with session count

Post-Revocation Effect:

• User is logged out from all devices/applications
• All API requests with old tokens will fail
• Fresh login required on all devices
• New sessions will have new tokens and IDs

Important Notes:

• This action affects the current session making the request
• User will need to re-authenticate immediately after this call
• All mobile apps and browser sessions will require re-login
• Consider using this for security incidents or password changes

Error Responses:

• 401 Unauthorized: JWT token required
• 500 Internal Server Error: Failed to revoke sessions