Current source preview reference
POST /v1/auth/logout
Logout. Permissions, parameters, responses and examples.
Read pinned handler: apps/api/kodesec_api/auth.py:1825
Logout
Logout through POST /v1/auth/logout. The parameters and declared response shapes below come from this exact source snapshot.
Source preview; no stable third-party integration promise. This page makes no request to a local installation.
Authority
Browser operator session only at the middleware boundary. Route-specific ownership and generation checks also apply.
Browser mutations require the exact control Origin and session-bound CSRF header. IDE callers use only their admitted route scope and exact generation.
Parameters and headers
| Name | Location | Contract |
|---|---|---|
X-CSRF-Token | header Conditional / optional | Required for browser mutations with the exact control Origin. Not an IDE capability. Schema |
Request body
No typed JSON body is declared by this handler. That does not rule out source-level request parsing; inspect the pinned implementation, especially for internal connector protocols.
Responses
| Status | Meaning and declared shape |
|---|---|
200 | Successful Response application/json · object |
400 | Exact host, malformed request or URL credential refusal application/json · object |
401 | Missing or invalid membership application/json · object |
403 | Exact origin, CSRF or route authority refusal application/json · object |
429 | Authentication rate or connection limit application/json · object |
An empty or broad schema preserves the source contract. It is not a promise of an empty response.
Source-linked errors
Literal HTTP errors in this handler and same-file helper call graph, plus control middleware. Dynamic and cross-module failures may add other errors; source links are authoritative.
4 source error observations
| Status | Source detail | Recovery |
|---|---|---|
| 401 ↗ | browser member is missing or revoked, or its local cookie was removed | Reconcile the exact browser or IDE membership through the normal owner workflow. |
| 401 ↗ | browser member is missing or revoked, or its local cookie was removed | Reconcile the exact browser or IDE membership through the normal owner workflow. |
| 401 ↗ | browser member is missing or revoked, or its local cookie was removed | Reconcile the exact browser or IDE membership through the normal owner workflow. |
| 401 ↗ | browser member is missing or revoked, or its local cookie was removed | Reconcile the exact browser or IDE membership through the normal owner workflow. |
Synthetic examples
These examples validate declared JSON shapes and formats. They contain no real installation data and do not prove runtime admission, cross-field validation, authority or successful work.
Response 200 JSON
{}All referenced models remain in its components section. Browse control model definitions.