POST
Log out
Ends the session and makes the access token stop working. Send the user’s id_token as the Authorization bearer, and the access_token in the body. After this, the user has to log in again.
This is one of the two places the access_token is used — as a body field, not as the bearer. Every protected call, including this one, authenticates with the id_token. See Using your tokens.

Authorizations

Authorization
string
header
required

The user's id_token from authentication — the ID token, not the access_token. The program and environment come from the token.

Headers

x-program-id
string
required

Identifies the program. Can also be sent as the programId query parameter.

Body

application/json
access_token
string
required

The access_token from sign-in — not the id_token sent as the Authorization bearer. This is the token being revoked.

Response

Logged out

success
boolean
Example:

true

data
null