post https://{domain}/idp/{version}/account/logout
The access token is revoked on a successful /logout
call. This endpoint requires the access token to be sent as a bearer token, in the Authorization
header.
This endpoint can be used to revoke a single access token for a user, or to invalidate all sessions.
To invalidate all sessions, the all_sessions
parameter must be included and set to true
.
The refresh token is required to be passed as part of the call so that it can be invalidated as well.
This API endpoint is intended for Next Identity API integration only.