Terminate other authorized clients

POST https://z.u1v.ru/api/v1/users/me/authorized_clients/terminate_others

Revoke all authorized clients for the current user except the client used for this request. This invalidates other browser sessions server-side and revokes other per-client API tokens.

Legacy global API-key clients cannot be individually terminated through this endpoint; use POST /users/me/api_key/regenerate to invalidate legacy API-key access.

Changes: New in Zulip 12.0 (feature level 499) for web sessions. In feature level 500, this also revokes other per-client API-token clients.

Usage examples

The -u line implements HTTP Basic authentication. See the Authorization header documentation for how to get those credentials for Zulip users and bots.

curl -sSX POST https://z.u1v.ru/api/v1/users/me/authorized_clients/terminate_others \
    -u EMAIL_ADDRESS:API_KEY

Parameters

This endpoint does not accept any parameters.

Response

Return values

  • revoked: integer

    Number of authorized clients revoked.

Example response(s)

Changes: As of Zulip 7.0 (feature level 167), if any parameters sent in the request are not supported by this endpoint, a successful JSON response will include an ignored_parameters_unsupported array.

A typical successful JSON response may look like:

{
    "msg": "",
    "result": "success",
    "revoked": 2
}