End the session
POST/admin/auth/logout
Both halves happen. The session is recorded as disabled, so it is dead even if it was copied somewhere else, and the cookie is cleared, which is what stops the browser from presenting it again. Neither alone is a sign-out.
Responses
- 204
- 401
- 403
- 500
Session revoked and cookie cleared
No session cookie, or it expired
account_suspended
The session could not be revoked — the cookie is left in place rather than cleared over a session that is still live