Skip to navigation

Revoke all sessions for a customer

Revoke all sessions for a customer.

Credential: Partner secret

Before you call

  • A server-side partner secret for the owning partner. Do not send an Origin header.

Invalidates all current sessions for this identity across integrations of the authenticated partner; future minting remains allowed. Missing identity is a 204 no-op.

Confirm with Sinbad that this endpoint is enabled in your environment.

Errors

StatusCodeWhat to do
400VALIDATION_ERRORCorrect the fields reported in details before retrying.
401UNAUTHENTICATEDCreate a new customer session or use a valid server credential.
403FORBIDDENCheck credential ownership, integration and the supplied Origin.
404NOT_FOUNDCheck the resource ID. A resource that belongs to someone else also returns 404.
409CONFLICTRead the current state again before you prepare or retry.
429RATE_LIMITEDWait for Retry-After before retrying.
503UPSTREAM_ERRORRetry with backoff; preserve the same idempotency key for a repeated mutation.

Authentication

AuthorizationBearer

Bearer authentication of the form Bearer <token>, where token is your auth token.

Path parameters

partnerUserIdstringRequired1-128 characters

Exact stable customer ID, URL-encoded as one path segment.

Response

Sessions invalidated

Errors

400
Bad Request Error
401
Unauthorized Error
403
Forbidden Error
404
Not Found Error
409
Conflict Error
429
Too Many Requests Error
503
Service Unavailable Error