AuthnAuthzAPI
Get Started
Get Started
  1. Session Management
  • Overview
  • Registration & Onboarding
    • Register a new user
      POST
    • Verify email address
      POST
    • Resend verification code
      POST
  • Authentication
    • Login user
      POST
    • Logout user
      POST
    • Request a password reset email
      POST
    • Verify password reset token
      POST
    • Update password
      POST
    • Refresh access token
      POST
    • Get current authenticated user
      GET
  • OAuth Authentication
    • OAuth authentication
      GET
    • OAuth callback
      GET
  • Session Management
    • Get all sessions
      GET
    • Revoke session
      DELETE
    • Revoke all sessions
      DELETE
  • Profile Management
    • View profile information
      GET
    • Update profile information
      PATCH
  1. Session Management

Revoke all sessions

Developing
DELETE
/sessions
Terminates all active sessions associated with the authenticated user except the current session. This endpoint signs the user out from every other device, browser, and application while keeping the current session active, allowing them to continue using the current device without interruption.
This operation is commonly used after changing a password, updating security settings, enabling multi-factor authentication, or whenever a user suspects unauthorized access to their account. Invalidating all other sessions helps prevent previously issued access tokens or session identifiers from being used on other devices, reducing the risk of unauthorized access.
Upon successful completion, only the current authenticated session remains valid, while all other active sessions are permanently terminated. Any affected devices or browsers will be required to authenticate again before they can access protected resources.

Request

Authorization
JWT Bearer
Add the parameter
Authorization
to Headers
Example:
Authorization: ********************
or

Responses

🟢200Success
application/json
Bodyapplication/json

🟠401Token Missing
🟠401Invalid Token
🟠401Token Expired
🟠403Account Not Exists
🟠403Account Soft Deleted
🟠403Account Deactivated
🟠403Account Locked
🟠403Account Not Verified
🟠401Session Not Found
🟠401Session Revoked
🟠401Session Expired
🟠429Rate Limit Exceeded
🔴500Internal Server Error
Request Request Example
Shell
JavaScript
Java
Swift
curl --location --request DELETE 'http://localhost:3000/api/v1/sessions' \
--header 'Authorization: Bearer <token>'
Response Response Example
200 - Example
{
    "status": "success",
    "message": "All active sessions revoked successfully.",
    "data": {
        "revoked_count": 14
    }
}
Modified at 2026-07-18 20:08:23
Previous
Revoke session
Next
View profile information
Built with