Revoke Current Session

POST /api/v1/auth/logout

Access

Authentication options declared in the contract include user cookie session or bearer service token.

Use a user cookie session for this account operation.

Authentication and permissions explains tokens, cookies, CSRF, and workspace context.

Parameters

Name	Location	Required	Type	Description and constraints
X-EyesOnIt-Session-Id	header	No	string (uuid)	The sessionId the caller expects. Required when switching workspaces and for cookie requests after workspace rotation. A mismatched value returns 409 with X-EyesOnIt-Workspace-Changed: 1. Bootstrap with getCurrentPrincipal; never replay a mutation automatically after changing context. Bearer clients do not use this header.
X-CSRF-Token	header	No	string	Required for unsafe requests authenticated by CookieSession; ignored for bearer clients. minimum length 32. maximum length 256

cURL request template

Set the connection variables described in Get started. Replace each additional EOI_… variable with the parameter value for this request. This template sends the request when run.

curl --fail-with-body --silent --show-error \
  --request POST \
  --cookie "${EOI_COOKIE_JAR}" \
  --header "X-EyesOnIt-Session-Id: ${EOI_SESSION_ID}" \
  --header "X-CSRF-Token: ${EOI_CSRF_TOKEN}" \
  "${EOI_API_BASE_URL}/auth/logout"

Contract responses

The table records responses declared by the OpenAPI contract. See Errors and status codes for the runtime error envelope and shared failures.

Status	Description	Media type	Body
204	Successful Response	—	Empty body

Operation identifier revokeCurrentSession. Browse Authentication and sessions.