Revoke every browser session of the account

DELETE

/v1/sessions

const url = 'https://api.aetherpush.com/v1/sessions';
const options = {method: 'DELETE', headers: {Authorization: 'Bearer <token>'}};

try {
  const response = await fetch(url, options);
  const data = await response.json();
  console.log(data);
} catch (error) {
  console.error(error);
}

curl --request DELETE \
  --url https://api.aetherpush.com/v1/sessions \
  --header 'Authorization: Bearer <token>'

What the dashboard’s “Log out all sessions” calls. Deletes every session credential of the current account, the one on this request included, except credentials created by the CLI sign-in ceremony (cli_browser, cli_device): those are listed and revoked per machine under /v1/cli/devices. Sessions that predate credential attribution are revoked too. Always answers 204, also when nothing was left to revoke. One session_revoked audit row records the count.

Authorizations

accessKeyAuth

Responses

204

Every browser session of the account is revoked.

401

Unauthenticated.

application/json

object

error

required

Human-readable error message.

string

requestId

Unique identifier for the request, also exposed as the X-Request-Id response header.

string

Example

{
  "error": "The requested resource was not found.",
  "requestId": "req_abc123"
}

403

API keys and named access keys cannot access this endpoint; a login session is required.

application/json

object

error

required

Human-readable error message.

string

requestId

Unique identifier for the request, also exposed as the X-Request-Id response header.

string

Example

{
  "error": "The requested resource was not found.",
  "requestId": "req_abc123"
}

500

Internal server error.

application/json

object

error

required

Human-readable error message.

string

requestId

Unique identifier for the request, also exposed as the X-Request-Id response header.

string

Example

{
  "error": "The requested resource was not found.",
  "requestId": "req_abc123"
}