Logout and revoke tokens
POST
/api/auth/logout
Revokes the refresh token and clears authentication cookies.
Authorizations
ApiToken
Long-lived API token created via POST /api/api-tokens (returned once in plaintext). A token created with readOnly may only perform safe requests (GET, HEAD, OPTIONS); write requests are rejected on every endpoint.
Type
API Key (header: X-API-TOKEN)
or
JWT
JWT access token obtained via POST /api/auth/login. Send as: Authorization: Bearer
Type
HTTP (bearer)
Request Body
application/json
JSON "refreshToken": "string"
{
}
Responses
Logged out successfully
application/json
JSON "message": "Logged out successfully"
{
}