Revoke a specific session

DELETE/api/user/sessions/{session_id}

revokeMySession

Session-authenticated caller only. Account-scoped revoke. Refuses to revoke the caller's own session (use `DELETE /api/sessions` for that). 404 covers both missing rows and cross-account attempts — the predicate filters both at once.

Requires authentication using a session cookie — see tokens and scopes.

curl

curl -X DELETE 'https://neosource.dev/api/user/sessions/SESSION_ID' \
  -b 'ns_session=$NEOSOURCE_SESSION'

fetch

fetch("https://neosource.dev/api/user/sessions/SESSION_ID", {
  method: "DELETE",
  credentials: "include",
});

Path parameters

session_idrequired: `UUIDv4` session id to revoke. The route refuses to revoke the caller's own session here — clients use `DELETE /api/sessions` for that flow.
string

Responses

204Session revoked

403Forbidden — one of: forbidden, needs_scope

application/json

one of

ErrorForbidden
NeedsScopeError
object
`403` body returned when a classic OAuth token is asked for something its granted scopes do not cover — an explicit private listing without `repo`, or the one-click GitHub mirror without `admin:public_key`. `scope` names the missing grant so the client can say exactly what the token lacks. There is no elevation route to widen it any more (a re-link goes through the GitHub App, whose tokens carry no scopes), so the client's answer is to say so, never to start a handshake.
errorrequired
string
Always `needs_scope` — this body exists to carry the extra fields that kind needs.
"needs_scope"
scoperequired
string
The provider scope to request via elevation (e.g. `"repo"`).

Standard errors

Bodies documented once for the whole API — see standard errors.

400Bad Request — one of: invalid_input
401Authentication required
404Not Found — one of: not_found
409Conflict — one of: already_exists, conflict
429Rate limited — retry after the `Retry-After` header
500Internal server error
503Service temporarily unavailable / at capacity — retry after the `Retry-After` header
504Gateway timeout — the request exceeded the server's handling budget