Sign out of one session
Ends it and every grant it made: its refresh tokens stop working. Each app the session had signed in to that registered a `backchannel_logout_uri` gets a logout token; one that turned `backchannel_logout_session_required` off gets it without `sid`, so it signs the person out of every session it has. Needs `me:write`. Recorded as `user.sessions_revoked`.
/v1/sessions/{session}Ends it and every grant it made: its refresh tokens stop working. Each app the session had signed in to that registered a backchannel_logout_uri gets a logout token; one that turned backchannel_logout_session_required off gets it without sid, so it signs the person out of every session it has. Needs me:write. Recorded as user.sessions_revoked.
Authorization
bearer An access token from this issuer for its account API (resource=<issuer>/me).
In: header
Path Parameters
length <= 100Response Body
application/problem+json
application/problem+json
application/problem+json
application/problem+json
curl -X DELETE "https://example.com/v1/sessions/string"Change the signed-in person's profile PATCH
Their username, names, picture and language; null clears one. Not their email, which a sign-in method proves. Needs `me:write`. Recorded as `user.updated`.
List the signed-in person's sessions GET
Newest first, the caller's own marked `current`. Needs `me:read`.