Destroy

This endpoint is used to destroy an access token as well as destroy a user session.

Parameters

• access_token (required)
• post_logout_redirect_uri (optional) only valid for destroying user sessions. This paramter is ignored if an access token is presented.
• state (optional)

Example

curl -X GET \
'/oauth/destroy?access_token=1234&post_logout_redirect_uri=encoded_logout_redirect_url&state=state_value'

If you passed the logout redirect URI parameter, you should not pass the access_token. The redirect URL is meant for destroying sessions and not the access token.

Response

{
    "status": true,
    "description": "Session destroyed successfully"
}

For security reasons, the response will always return a successful message.