Sign a member's session out

DELETE

/teams/{teamId}/sessions/{sid}

Needs session:manage-members and a reason; not under an assumed
identity. The member is audited and emailed (unless it is the caller's
own session). The team owner's sessions are theirs alone. Signing out
a session already revoked answers 200 with revoked: false.

Capability: session:manage-members (area team). A reason; the member is told.

Request

Path Params

Body Params application/jsonRequired

Examples

Responses

🟢200

application/json

Signed out

Bodyapplication/json

🟠403

🟠404

🟠400ReasonRequired

🟠401KlockUnauthorized

Request Example

Shell

JavaScript

Java

Swift

curl --location --request DELETE 'https://api.prod-orm.io/teams//sessions/' \
--header 'Content-Type: application/json' \
--data '{
    "reason": "string"
}'

Response Example

200 - Example 1

{
    "session": {
        "id": 0,
        "uuid": "string",
        "userAgent": "string",
        "ip": "string",
        "lastSeenAt": "2019-08-24T14:15:22.123Z",
        "expiresAt": "2019-08-24T14:15:22.123Z",
        "revokedAt": "2019-08-24T14:15:22.123Z",
        "current": true,
        "assumed": {
            "actorId": 0,
            "mode": "read"
        },
        "kind": "browser",
        "binding": "device",
        "device": {
            "id": "string",
            "label": "string"
        },
        "caps": [
            "string"
        ],
        "limits": {},
        "checkInBy": null,
        "stepUpAt": null,
        "label": "string",
        "clientName": "string",
        "subject": {
            "kind": "passwordless",
            "id": null
        },
        "frozen": {
            "at": "2019-08-24T14:15:22.123Z",
            "reason": "string"
        },
        "revokedReason": "string",
        "rotatedFromId": 0,
        "owner": {
            "id": 0,
            "username": "string"
        }
    },
    "revoked": true
}

Modified at 2026-10-05 14:01:12

The team's members' live sessions

Sign an account out everywhere