Log out

Revokes this session server-side and clears the cookie. The token is opaque and server-side precisely so this can be instantaneous rather than a matter of waiting for an expiry.

Authorization

consoleSession

__Host-apf_console<token>

Set by POST /console/v1/sessions. HttpOnly, Secure, SameSite=Strict, Path=/, __Host- prefixed. It is never readable by JavaScript and there is no header alternative: accepting both carriers would let an attacker choose the weaker one.

In: cookie

Response Body

`application/json`

curl -X DELETE "https://example.com/console/v1/sessions/current" \  -H "Authorization: Bearer apf_v2_tu_credencial"

Empty

Log out

Authorization

Response Body

204

400application/json

401application/json

403application/json

404application/json

405application/json

413application/json

415application/json

422application/json

500application/json

503application/json

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`

`application/json`