Logout

Overview

Revoke the caller's current Passport access token and record the logout. This deletes the active token, stamps logout_time on the latest RsAuthEvent for the user, and writes an AUTH_LOGOUT audit log. The token cannot be reused afterward.

Prerequisites

• A bearer token. Callable with Partner and Account tokens.

Base URL

Endpoint

GET /api/v1/logout

Authentication

• Requires a bearer token in the Authorization: Bearer <bearer-token> header.

• Who can call it: Partner and Account tokens.

• Authentication uses a Passport bearer token.

• Acts only on the authenticated user.

• There is no partner/account scoping.

Rate limit

• No rate limit.

Request

• Header: Authorization: Bearer <bearer-token> (required).
• No path params, query params, or body. (Method is GET despite being a state-changing action.)

Response

• data.success (boolean) — always true on success

401 "Unauthenticated." if the token is missing/invalid.

200 Success · 200

{
  "data": {
    "success": true
  }
}

Errors

Example request

curl --request GET \
  --url "https://production-api.shoutaboutus.com/api/v1/logout" \
  --header 'Authorization: Bearer <bearer-token>' \
  --header 'Accept: application/json'