Skip to main content
DELETE
Revoke the session
Authentication is new. These endpoints are served by your application’s issuer, such as https://<name>.auth.didit.me, and never take your Didit API key.
Send the person’s current access token: one that has not expired and has not been replaced by a refresh. A 401 means the session did not end, so refresh and sign out again with the new access token. Access tokens you verify offline stay valid until they expire, within 5 minutes. After sign-out, send the person to your post_logout_redirect_uri, if you set one. See Sign out.

Authorizations

Authorization
string
header
required

The person's access token from POST /token/: an ES256 JWT with header typ: at+jwt, valid for at most 5 minutes. Not your Didit API key.

Response

The session ended.