Revoke Session
Deletes one of the calling user's own session records. Only the owner's rows can be deleted (404 otherwise).
Record-only. Because sessions are validated by JWT + global token_version (no per-request session lookup), deleting a row hides it but the device's existing token remains valid until it expires. For an immediate kill of other devices, use Sign Out Other Sessions.
Path parameters
uuid string (uuid) Req
The session's
uuid from List Active Sessions.Deprecated: the legacy integer id is still accepted in the path until the sunset, answered with Deprecation and Sunset headers. Use the uuid.
Response (200 OK)
revoked bool
Always
true on success.session_uuid string (uuid)
The
uuid of the deleted session.Deprecated: until the sunset this response also carries the legacy integer session_id. Don't use it; read session_uuid.
Errors
400 Bad Request
An integer id after the sunset (
integer_id_unsupported).401 Unauthorized
Missing or invalid auth.
404 Not Found
No such session, or it doesn't belong to the caller.
Request
curl -X DELETE "https://api.ngris.com/v1/user/sessions/019a7b69-5ec2-726f-a2e6-bddaef24ae2f" \
-H "X-API-KEY: <your_api_key>"
Response — 200 OK
{
"revoked": true,
"session_uuid": "019a7b69-5ec2-726f-a2e6-bddaef24ae2f"
}
Was this helpful?