Easy Labs
APIAccount & operationsLogin sessions

Revoke a specific login session

Revoke a single session by ID. Cannot revoke the current session (returns 403). The revoked session is also signed out via Supabase Admin API (best-effort).

DELETE
/v1/auth/login-sessions/{id}

Authorization

bearerAuth
AuthorizationBearer <token>

Supabase JWT bearer token for dashboard / user-scoped endpoints. Role-derived scopes: ROOT/ADMIN → full admin; USER → read-only treasury.

In: header

Path Parameters

id*string
Formatuuid

Response Body

application/json

application/json

application/json

application/json

application/json

application/json

curl -X DELETE "https://loading/v1/auth/login-sessions/497f6eca-6276-4993-bfeb-53cbbbba6f08"
{
  "success": true,
  "timestamp": "2019-08-24T14:15:22Z",
  "data": null,
  "message": "string",
  "pagination": {
    "total": 0,
    "limit": 1,
    "offset": 0,
    "has_more": true,
    "truncated": true,
    "cursors": {
      "first": "string",
      "last": "string"
    }
  }
}
{
  "success": false,
  "timestamp": "2019-08-24T14:15:22Z",
  "error": {
    "code": "string",
    "message": "string",
    "details": null
  }
}
{
  "success": false,
  "timestamp": "2019-08-24T14:15:22Z",
  "error": {
    "code": "string",
    "message": "string",
    "details": null
  }
}
{
  "success": false,
  "timestamp": "2019-08-24T14:15:22Z",
  "error": {
    "code": "string",
    "message": "string",
    "details": null
  }
}
{
  "success": false,
  "timestamp": "2019-08-24T14:15:22Z",
  "error": {
    "code": "string",
    "message": "string",
    "details": null
  }
}
{
  "success": false,
  "timestamp": "2019-08-24T14:15:22Z",
  "error": {
    "code": "string",
    "message": "string",
    "details": null
  }
}

Upload file content

Upload binary content to a pre-existing file record. The file must already exist (Finix or webhook creates these). Multipart/form-data with a `file` field. Allowed types: jpeg, png, pdf. Max 5MB.

Sign out all other sessions

Revokes all login sessions except the current one. The current session remains active. Each revoked session is also signed out via Supabase Admin API (best-effort).