---
title: "POST /content-lock/revoke"
method: POST
path: "/content-lock/revoke"
tags: ["encryption"]
---

# POST /content-lock/revoke

`POST /content-lock/revoke`

## Request

- The document declares no server URL.
- Auth: one of:
  - API key in query parameter `auth`
  - API key in header `Authorization`

Withdraws the grant. Deliberately does not lock the encryption session: background sync and
capture keep working, only what GUI surfaces may show changes.

## Response `200`

Content access withdrawn

- ContentLockStatusEnvelope: Canonical success envelope: `{ "data": T, "ts": <unix millis i64> }`. `ts` is `chrono::Utc::now().timestamp_millis()`, set in the webserver handler via [`ApiEnvelope::now`] (the contract carries only the type + the clock helper, not a hard dependency on when the handler reads the clock). `rename_all = "camelCase"` is a no-op for the single-word fields here but is declared for forward-compat. IMPORTANT (utoipa v4): every concrete `ApiEnvelope<X>` that needs a named OpenAPI component is declared in the `#[aliases(...)]` block below. Add a new alias line whenever a new payload type needs enveloping. NEVER register the bare `ApiEnvelope` in `components(schemas(...))` — utoipa errors on a bare generic, and an un-aliased generic inlines an anonymous schema.
  - `data` ContentLockStatusResponse, required: Whether history-derived content may be shown to GUI-class clients (`gui`, `helper`). `unlocked` is computed at read time from the in-memory grant AND the encryption facts (initialised, session ready, background ready), so losing the session revokes visibility without any extra coupling. `generation` changes with every grant change, so a client can tell a stale answer from a current one.
    - `generation` integer, required
    - `unlocked` boolean, required
  - `ts` integer, required: Server time when the response was built (unix epoch milliseconds).

## Changes

- **2026-10-01** `aa64ebd8cf74`: 1 info
  - endpoint added

[Operation history](https://skmtc.dev/uniclipboard/apis/uniclipboard-daemon-api/changes/content-lock/revoke/post.md)

---

[API](https://skmtc.dev/uniclipboard/apis/uniclipboard-daemon-api.md) - [All operations](https://skmtc.dev/uniclipboard/apis/uniclipboard-daemon-api/llms.txt) - [OpenAPI document](https://skmtc.dev/uniclipboard/apis/uniclipboard-daemon-api/revisions/48a01cf04e4c?raw)