Logout

POST /auth/logout

Revoke all active tokens (both access and refresh) for the authenticated client. Requires a valid access token in the Authorization header.

Request

curl -X POST https://api.octopuscards.io/auth/logout \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."

No request body is required.

Request Parameters

Response

{
  "success": true,
  "data": {
    "message": "Successfully logged out"
  }
}

Response Fields

All tokens for the client are revoked - not just the one used in the request. After logout, both the access token and any refresh tokens will stop working. To use the API again, call login to obtain new tokens.

Errors

{
  "error": {
    "name": "UnauthorizedError",
    "code": "UNAUTHORIZED",
    "message": "Authorization header required"
  }
}