SPA Authentication

SPA Logout All - Revoke all sessions

Revokes all refresh tokens for the authenticated user. Requires valid JWT.

POST/api/spa/auth/logout-all

Authorizations

X-AUTH-TOKEN
stringheaderrequired

Value for the X-AUTH-TOKEN header parameter.

Request Body

application/json
required

The new SpaLogout resource

{
  "refreshToken": "a1b2c3d4e5f6...",
  "success": true,
  "revokedSessions": 3
}

Response

201application/json

SpaLogout resource created

success
boolean

Success status

Available options: truefalse

Example: true

revokedSessions
integer

Number of sessions revoked (for logout-all)

Example: 3