Revoke the caller's current Passport access token and records the logout: deletes the active token, stamps logout_time on the latest RsAuthEvent for the user, and writes an AUTH_LOGOUT audit log. The token cannot be reused afterward.

Auth: Both — authentication (Passport bearer). Acts only on the authenticated user; no partner/account scoping.

Rate limit: No rate limit.

Request

• Header: Authorization: Bearer <bearer-token> (required).
• No path params, query params, or body. (Method is GET despite being a state-changing action.)

Response — { data. } envelope.

• success (boolean) — always true on success

401 "Unauthenticated." if the token is missing/invalid.