Revoke one sign-in session
End one session immediately. That browser has to sign in again.
/v1/workspace/sessions/{session_id}/revokeAdmin- Operation id
- revoke_session
- Access
- An editor or a viewer is refused.
/v1/workspace/sessions/{session_id}/revokeEnd one session immediately. That browser has to sign in again.
Use this for a lost laptop or a session nobody recognises. It affects only the session named, so the same person stays signed in elsewhere.
Revoking an already revoked session is a success, with already: true. A
session belonging to someone outside this workspace is 404.
This does not suspend the account. To stop someone signing in at all, change their status instead.
Tenancy: the request is scoped to one workspace, and the credential presented is what selects it. A caller with no membership in that workspace is refused with 404, which is indistinguishable from a workspace that does not exist.
Authorisation: admin or owner. An editor or viewer receives 403 insufficient_role.
Access: Authorization: Bearer carrying either a realm access token or an API key. A key must hold the workspace-admin:write scope, and the workspace role of the person who owns it must meet the floor above.
A realm-issued access token, presented as Authorization: Bearer <token>. It acts as the person who signed in, and every operation resolves their workspace role live from the membership record.
In: header
Path Parameters
uuidResponse Body
application/json
application/json
curl -X POST "https://example.com/v1/workspace/sessions/497f6eca-6276-4993-bfeb-53cbbbba6f08/revoke"{}