Revoke Session
Deletes one of the calling user's own session records. Only the owner's rows can be deleted (404 otherwise).
Record-only. Because sessions are validated by JWT + global token_version (no per-request session lookup), deleting a row hides it but the device's existing token remains valid until it expires. For an immediate kill of other devices, use Sign Out Other Sessions.
Path parameters
id int64
Session row ID from List Active Sessions.
Response (200 OK)
revoked bool
Always
true on success.session_id int64
The deleted session ID.
Errors
400 Bad Request
Invalid session id.
401 Unauthorized
Missing or invalid auth.
404 Not Found
No such session, or it doesn't belong to the caller.
Request
curl -X DELETE "https://api.ngris.com/v1/user/sessions/5521" \
-H "X-API-KEY: <your_api_key>"
Response — 200 OK
{
"revoked": true,
"session_id": 5521
}