Revoke supplied session credentials and expire a supplied browser cookie

DELETE 
/api/v1/session

Logout is idempotent. A cookie, ordinary bearer session, both, or neither may be supplied; any supplied recognized session credentials are revoked. Personal access tokens cannot use this credential-management route. Browser requests are subject to same-origin checks.

Responses

204

Supplied credentials are revoked or were already absent

Response Headers

Cache-Control

Always no-store

Set-Cookie

Cookie-expiration header when a browser cookie was supplied

X-Request-Id

Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.

403

The browser mutation did not originate from this application, or the authenticated member lacks the required permission

Response Headers

X-Request-Id

Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.

421

The request authority or direct peer is outside the configured Jiandu ingress boundary

Response Headers

X-Request-Id

Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.

503

A required core dependency is unavailable; retry with bounded backoff

Response Headers

X-Request-Id

Opaque request correlation identifier. ProblemDetails.requestId carries the same value on JSON failures.