Revoke an active client session and affected backend sessions through the internal outbox path.

POST

/v1/sessions/{client_session_id}/revoke

Authorizations

• oidc

Parameters

Path Parameters

client_session_id

required

string

Query Parameters

tenant_id

string

environment_id

string

Request Body ^required

object

reason_code

required

string

/^[a-z0-9_]+$/

reason

string

<= 500 characters

correlation_id

string

Responses

202

Revoke transition accepted and audited.

object

schema_version

required

accepted

required

boolean

client_session_id

required

string

action

required

Allowed values: terminate revoke

previous_state

required

string

Allowed values: pending active reconnecting draining terminated revoked expired failed

next_state

required

string

Allowed values: pending active reconnecting draining terminated revoked expired failed

reason_code

required

string

/^[a-z0-9_]+$/

reason

required

string | null

<= 500 characters

correlation_id

required

string | null

revocation_id

required

string | null

backend_session_ids

required

Array<string>

audit_event_ids

required

Array<string>

upstream_attempted

required

403

Caller lacks session.revoke.