Sign Out

Sign out. This ends EVERY session on the account, not only this one.

A JWT cannot be recalled once signed, so "sign out" has to mean invalidating the tokens rather than forgetting one on the client. Each token carries the epoch it was minted under; raising the account's epoch refuses all of them at the next request.

That it signs out everywhere is deliberate, and said plainly here because it is not what "log out" usually means. The reason to reach for this is a token you believe someone else has, and in that case ending only the session in your own browser is precisely the wrong outcome.

API keys are untouched -- they have their own revocation, and an ERP should not drop because a person signed out of the portal.