Revoke all user device secrets

DELETE

/api/admin/users/{userId}/device-secrets

Code sample: Shell / cURL

curl --request DELETE \
  --url https://auth.example.com/api/admin/users/example/device-secrets \
  --header 'Authorization: Bearer <token>' \
  --header 'Content-Type: application/json' \
  --data '{ "reason": "admin_bulk_revocation" }'

Revokes all device secrets for a user with an optional audit reason.

Authorizations

• adminBearer
• adminSessionCookie

Parameters

Path Parameters

userId

required

string

Request Body

Optional revocation reason.

Media type application/json

object

reason

string

key

additional properties

Example

{
  "reason": "admin_bulk_revocation"
}

Responses

200

All device secrets revoked for a user.

Media type application/json

object

success

required

boolean

user_id

required

string

revoked_count

required

integer

revoked_at

required

string format: date-time

reason

required

string

key

additional properties

Example

{
  "success": true,
  "user_id": "user_123",
  "revoked_count": 2,
  "revoked_at": "2026-06-01T00:00:00.000Z",
  "reason": "admin_bulk_revocation"
}

400

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

401

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}

403

Error response.

Media type application/json

object

error

string

message

string

error_description

string

key

additional properties

Example ^generated

{
  "error": "example",
  "message": "example",
  "error_description": "example"
}