End a Direct Auth managed browser session.
curl --request POST \ --url https://auth.example.com/api/v1/auth/direct/logout \ --header 'Content-Type: application/json' \ --data '{ "client_id": "client_123", "revoke_tokens": false }'Invalidates the current Direct Auth session when present, optionally revokes associated device secrets according to logout_scope, and clears Direct Auth cookies.
Request Body required
Section titled “Request Body required ”object
Example
{ "client_id": "client_123", "revoke_tokens": false}Responses
Section titled “ Responses ”Successful JSON response.
object
Example
{ "success": true, "message": "Logged out successfully"}Error response.
object
Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.
object
Example generated
{ "error": "example", "error_description": "example", "message": "example", "webauthn_signal": { "unknown_credential": true }}Error response.
object
Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.
object
Example generated
{ "error": "example", "error_description": "example", "message": "example", "webauthn_signal": { "unknown_credential": true }}Error response.
object
Optional browser-side WebAuthn Signal API hint. When unknown_credential is true, clients that just received a WebAuthn credential assertion may call PublicKeyCredential.signalUnknownCredential() for that credential ID.
object
Example generated
{ "error": "example", "error_description": "example", "message": "example", "webauthn_signal": { "unknown_credential": true }}