Revokes one of the caller's tokens.

DELETE

/api/v1/tokens/{id}

401 when nothing was signed in, 403 when authenticated with a token, 404 when no live token of the caller's has that id.

Authorization

session

cookietessera_session<token>

Set by POST /auth/login. A browser sends it automatically; it is HttpOnly, so page scripts cannot read or set it.

id*string

The token's identifier

Revoked

curl -X DELETE 'https://example.com/api/v1/tokens/string'

Empty