Revoke a passwordless session

DELETE

/provision/databases/{id}/passwordless/{sessionId}

Kept as a row for the audit trail. A Kerberos principal is removed
from the KDC, and a service session bound to it (klock v2) is revoked
with it. Revoking again is not an error.

Capability: access:write (area resource, on the database).

Request

Path Params

Responses

🟢200

application/json

Revoked

Bodyapplication/json

🟠404

🟠400ValidationError

🟠401KlockUnauthorized

🟠403CapabilityMissing

Request Example

Shell

JavaScript

Java

Swift

curl --location --request DELETE 'https://api.prod-orm.io/provision/databases//passwordless/'

Response Example

200 - Example 1

{
    "session": {
        "id": "497f6eca-6276-4993-bfeb-53cbbbba6f08",
        "role": "string",
        "entId": "string",
        "scope": {
            "ops": [
                "read"
            ],
            "tables": [
                "string"
            ],
            "columns": {
                "property1": [
                    "string"
                ],
                "property2": [
                    "string"
                ]
            }
        },
        "label": "string",
        "auth": "secret",
        "principal": "string",
        "tlsFingerprint": "string",
        "poolId": 0,
        "lastUsedAt": "2019-08-24T14:15:22.123Z",
        "expiresAt": "2019-08-24T14:15:22.123Z",
        "revokedAt": "2019-08-24T14:15:22.123Z",
        "createdAt": "2019-08-24T14:15:22.123Z"
    }
}

Modified at 2026-10-05 14:01:12

Issue a passwordless session (v1)

Bind a session to a device key