Logout and revoke refresh token

1 min

POST

https://api.upstartcommerce.com/api/v1/auth/logout

Revokes the provided refresh token, ending the user's session.

After logout:

The refresh token can no longer be used to obtain new access tokens
Existing access tokens remain valid until they expire (stateless validation)
For immediate access revocation, services should implement token blacklisting

acceptstringGenerated from available response content types

bodyobjectRefresh token to revoke

204<p>Logout successful - refresh token revoked</p>

400Invalid request body

401Invalid or already revoked refresh token

500Internal server error

curl --request POST \
     --url https://api.upstartcommerce.com/api/v1/auth/logout \
     --header 'accept: application/json' \
     --header 'content-type: application/json' \
     --data '{
     "refreshToken": "eyJhbGciOiJSUzI1NiIsInR5cCI6IkpXVCJ9..."
     }'