Endpoint Logout

Tento endpoint umožňuje odhlásit session autorizovaného uživatele. Povolené metody:

GET - ukončení session a případně prohlížeč (user agent) přesměrovat parametrem post_logout_redirect_uri
POST - ukončení session pomocí Access Tokenu. Využití pro např. API.

Login session revocation

Both logout methods terminate the login identified by its login_token. POST logout removes all persistent login-session rows for that token, including the original row when SSO and impersonation have changed both the access-token subject and client. Independently established logins with another login_token remain available.

A logged-out login cannot silently authorize through a surviving browser cookie or redeem a previously issued authorization code. The client must establish a fresh login before requesting new tokens. This uses the existing login-token revocation store and requires no database migration or client-side session versioning.

Request GET

GET https://auth.testing-stormm.cz/logout

Request Query Parametry

Parametr	Datový typ	Povinnost	Popis
`post_logout_redirect_uri`	string	Ano	Adresa na kterou bude client přesměrován

Request example

https://auth.testing-stormm.cz/logout?post_logout_redirect_uri=https://www.example.com/logout-callback

Request POST

POST https://auth.testing-stormm.cz/logout

HEADER

Accept:application/json
Content-Type: application/json
Authorization: Bearer a225bb6d1afb5ea825c2905a1c04e35a75641505

BODY

Bez těla.

Response

200

HEADER

Content-Type:application/json

BODY

{
    "success": true
}

401

HEADER

Content-Type:application/json

BODY

{
    "message": "Problem with JWS verification Unsupported input"
}