Zitadel Preview Docs
API referenceSessions

Revoke session

Revokes the session immediately (`state: revoked`). This is the logout operation. The session_token issued at creation (or superseded by a handoff exchange) is required. After revocation, any tokens derived from this session are invalidated.

DELETE
/sessions/{session_id}

Revokes the session immediately (state: revoked). This is the logout operation.

The session_token issued at creation (or superseded by a handoff exchange) is required. After revocation, any tokens derived from this session are invalidated.

Authorization

oauth2 session.delete
AuthorizationBearer <token>

In: header

Scope: session.delete

Path Parameters

session_id*string

The unique identifier of the session.

Query Parameters

project_id*string

The unique identifier of the project

Response Body

application/json

application/json

application/json

application/json

curl -X DELETE "https://example.com/sessions/abc123def456?project_id=river-8421"
Empty
{  "code": "string",  "message": "string",  "details": {}}
{  "code": "string",  "message": "string",  "details": {}}
{  "code": "string",  "message": "string",  "details": {}}
{  "code": "string",  "message": "string",  "details": {}}

Revoke my session DELETE

Revokes the session immediately (`state: revoked`). This is the logout operation. The __nextgen_session cookie issued at creation (or superseded by a handoff exchange) is required. After revocation, any tokens derived from this session are invalidated including the cookie itself, which is cleared in the response.

Flow Definitions

OpenAPI operations for flow definition templates.