Revokes an invite.

DELETE

/api/v1/admin/invites/{id}

The accounts it already admitted stay, since an account does not depend on its code still existing. This only stops the code letting anyone else in, what an operator who posted it in the wrong chat window wants.

Errors

401 when nothing was signed in, 403 when the caller is not an administrator or used a bearer token, 404 when no invite has that identifier.

Authorization

session

cookietessera_session<token>

Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.

Path Parameters

id*string

Which invite to revoke

Response Body

It no longer admits anybody

curl -X DELETE 'https://example.com/api/v1/admin/invites/string'

Empty