Sign out your other sessions

DELETE/api/v1/auth/sessions

Who can use this: Any signed-in accountAs Markdown

Ends your sessions all at once, along with their refresh tokens, including any whose token has run out but could still refresh. With except_current=true the session making this call stays signed in; with false it ends too, which signs you out everywhere. revoked is how many sessions ended.

Parameters

Name	Where	What it is
except_current required	query	true to keep the session making this call, false to end it too. There is no default.e.g. true

Good to know

Leaving out except_current, or sending anything but true or false, answers 400.
It only ever ends your own sessions.

curl -s -X DELETE 'https://api.mailmasker.org/api/v1/auth/sessions?except_current=true' \
  -H "Authorization: Bearer $TOKEN"

use Mojo::Base -strict;
use Mojo::UserAgent;

my $ua  = Mojo::UserAgent->new;
my $res = $ua->delete('https://api.mailmasker.org/api/v1/auth/sessions',
    { Authorization => "Bearer $ENV{TOKEN}" },
    form => { except_current => 'true' })->result;
die $res->code, ' ', ($res->json('/error') // $res->message), "\n" unless $res->is_success;
print $res->body, "\n";

homelab-cli sessions revoke --all-others

Response 200 OK

{ "ok": true, "revoked": 2 }