Endpoint
Logout a user by invalidating their refresh token. After logout, the refresh token can no longer be used to obtain new access tokens. No authentication required.
Request body
Valid refresh token to be invalidated.
Response
Indicates whether the request was successful.
ISO 8601 timestamp of when the response was generated.
Example request
curl -X POST http://localhost:8080/api/auth/logout \
-H "Content-Type: application/json" \
-d '{
"refreshToken": "eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9..."
}'
Example response
{
"success": true,
"timestamp": "2026-03-03T10:45:00Z"
}