Skip to main content

POST /auth/logout

This endpoint invalidates the user’s session by revoking all their refresh tokens. Requires a valid access token in the Authorization header.
Access tokens remain valid until they expire (15 minutes). For immediate full logout, the client should also clear the access token locally.

Request Headers

string
required
Bearer token. Format: Bearer YOUR_ACCESS_TOKEN

Response

boolean
Indicates whether the logout was successful.
string
A confirmation message.