---
title: "Revoke user sessions"
method: POST
path: "/users/revoke"
tags: ["UsersDetails"]
---

# Revoke user sessions

`POST /users/revoke`

## Request

- Base URL: `https://api.xfa.tech`
- URL: `https://api.xfa.tech/users/revoke`
- Auth: HTTP bearer

Revoke all sessions for a user, invalidating their previous authentication tokens.
Users can revoke their own sessions without organizationId.
Administrators can revoke any user's sessions within their organization (organizationId required).

## Query parameters

- `user` string, required
- `organizationId` string

## Response `204`

User sessions revoked successfully

## Other responses

- `400`: Bad request (missing required parameters)
- `403`: Forbidden (insufficient permissions)

---

[API](https://skmtc.dev/xfa/apis/xfa-api.md) · [All operations](https://skmtc.dev/xfa/apis/xfa-api/llms.txt) · [OpenAPI document](https://skmtc.dev/xfa/apis/xfa-api/revisions/1a1be0e8972b?raw)