API reference / Accounts
post
/v1/token/revokeRevoke a session
- Operation
revokeToken- Authentication
- None — public
Always answers 204. Whether the token was real is not the caller's business.
Request
Body
refresh_tokenstringrequiredResponses
204The session is revoked, or never existed.
400The request body or query failed validation.
errorobjectrequired429Rate limit exceeded. Retry after `retry-after` seconds.
errorobjectrequiredExample
curl -X POST https://api.haavisa.com/v1/token/revoke \
-H "Content-Type: application/json" \
-d '{
"refresh_token": "<refresh_token>"
}'More in Accounts
POST/v1/tokenGET/v1/token/introspectPOST/v1/token/mfaPOST/v2/accountsGET/v2/accounts/mePATCH/v2/accounts/meGET/v2/accounts/me/messaging-consentPUT/v2/accounts/me/messaging-consentPOST/v2/accounts/mfa/activatePOST/v2/accounts/mfa/disablePOST/v2/accounts/mfa/enrollPOST/v2/accounts/password-resetPOST/v2/accounts/password-reset/confirmPOST/v2/accounts/sign-inPOST/v2/accounts/sign-outPOST/v2/accounts/verify-emailPOST/v2/accounts/verify-email/resend
Something unclear? The eligibility guide explains the model behind the answers; the errors guide covers the envelope.