DELETE /api/admin/sessions/{id}

Developing

DELETE

/api/admin/sessions/{id}

DELETE /api/admin/sessions/🆔 signs one session out. Your own: always. Another admin's: owners (admins.sessions)
with a fresh step-up. Revokes the session's Cognito refresh token too.

Staff cookie session; any admitted staff member. Write requests need same-origin JSON and X-Admin-CSRF from this session.

Source snapshot: admin/src/app/api/admin/sessions/[id]/route.ts. This reference describes the current working tree, not proof of deployment. The response service types and validators remain authoritative.

Request

Authorization

API Key

Add parameter in cookie

__Host-hwa_session

Example:

__Host-hwa_session: ********************

Path Params

Header Params

Responses

🟢204

Completed; no response body.

This response does not have a body.

🟠400

🟠401

🟠403

🟠429

⚪default

Request Example

Shell

JavaScript

Java

Swift

curl --location --request DELETE '/api/admin/sessions/' \
--header 'X-Admin-CSRF;'

Response Example

400 - Example 1

{
    "error": {
        "code": "string",
        "message": "string"
    }
}

Modified at 2026-10-26 13:41:16

README — GET /api/admin/sessions

GET /api/admin/sessions