Invalidate a refresh token

POST

/api/v1/auth/logout

Code sample: cURL

curl -X POST 'https://dashboard.justcrawl.io/api/v1/auth/logout' \
  -H 'Content-Type: application/json' \
  -d '{"refreshToken":"<your-refresh-token>"}'

• Production

Revokes the supplied refresh token server-side so it can no longer be exchanged for new access tokens. The access token itself is unaffected — short-lived (15 minutes) and stateless, so the client should drop it locally as part of the same logout flow. Calling without a refreshToken still returns 204; the endpoint is intentionally tolerant so client logout buttons can fire blindly without first re-reading storage.

Request Body

Media type application/json

object

refreshToken

string

Example ^generated

{
  "refreshToken": "example"
}

Responses

204

Refresh token revoked (or no-op if missing). No response body.

500

Unexpected server error. Logs and PostHog $exception capture

Media type application/json

object

error

string

Example

{
  "error": "Something went wrong"
}