Skip to main content
POST
POST
Invalidates the caller’s JWT by removing it from the Redis token store. The token becomes immediately unusable even before its natural expiry. No request body is required — the token is read from the Authorization header.
After calling this endpoint, any further requests with the same token will receive a 401 Unauthorized response.

Headers

string
required
Bearer <access_token> — the JWT issued at login.

Response

boolean
true when the token has been successfully invalidated.
string
Human-readable confirmation message.

Authorizations

Authorization
string
header
required

Bearer authentication header of the form Bearer <token>, where <token> is your auth token.

Response

200

Logged out successfully