Revoke the Passport access token presented in the request's Authorization: Bearer header (SSO sign-out). Calls on the current token.

Auth: Both — authentication (Passport). The endpoint sits in the admin-only sso route group, but the method itself has no extra role gate: it scopes purely to the caller's own presented token, so any authenticated principal (Partner or Account) holding a valid token revokes only that token. No partner-tree walk, no ownership check, no invite hash.

Rate limit: No rate limit.

Request

• No path params.
• No query params.
• No request body (GET).

Response — { data. } envelope.

• status (string) — always "success" on success.
• message (string) — "Token revoked successfully!".

On failure the catch path returns defaultErrorResponse (generic error envelope) and writes an emergency debug log.