Ends every session except the one asking.
DELETE
The button to press on suspecting that another person is signed in as you. It spares the browser doing the asking, because being logged out by your own attempt to log everybody else out is a poor way to find out it worked.
Errors
401 when nothing was signed in, 403 when a bearer token was used.
sessioncookie
tessera_session<token>Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.
Every other session is over
curl -X DELETE 'https://example.com/api/v1/sessions'Empty