API ReferenceGeneratedAuth

Sign out everywhere else

Ends every session this account holds except the one making the request. Returns how many ended.

DELETE
/{appUid}/auth/sessions

Authorization

bearerAuth
AuthorizationBearer <token>

Authorization for API

In: header

Path Parameters

appUid*string

Your app's unique id. Find it in the console under the app's Settings, or in the URL of any app page.

Formatuuid

Response Body

application/json

application/json

application/json

application/json

application/json

curl -X DELETE "https://example.com/497f6eca-6276-4993-bfeb-53cbbbba6f08/auth/sessions"
{  "revoked": 2,  "forgotDevices": 1}

Sign out one other session

Ends one of the caller's other sessions. A session that is not the caller's answers 404 — the same as one that does not exist. The session making the request is refused with `SESSION_IS_CURRENT`: use sign-out for that.

Switch one of your sign-in methods on or off

Turns a single sign-in method on or off for the CALLER's own account. A switched-off method stays linked — the provider subject remains claimed and it can be switched back on — but no sign-in may come through it, enforced at each door rather than in the UI. Refuses to switch off the LAST enabled method, which would lock the owner out with no recovery path. Idempotent: setting a method to the state it already has succeeds without changing anything.