Sign out

Requires a valid session and matching Origin/form CSRF. Revokes the local session first, then attempts provider sign-out. A partial remote result redirects with status=partial; local revocation is preserved.

POST /api/v1/auth/logout

Operation: signOut · Download OpenAPI

Access

This operation does not use the panel session as its authentication mechanism. Follow the operation-specific checks described above.

session

{
  "type": "apiKey",
  "in": "cookie",
  "name": "__Host-localisync-session"
}

Parameters

Name	Location	Required	Description
`Origin`	header	Yes	Must equal configured PANEL_ORIGIN; cross-site Fetch Metadata is rejected.

Origin

{
  "type": "string",
  "format": "uri"
}

Request body

Required: Yes.

application/x-www-form-urlencoded

Field	Type	Required	Constraints / description
`csrf`	string	Yes	minLength: `1`; maxLength: `128`

{
  "type": "object",
  "required": [
    "csrf"
  ],
  "properties": {
    "csrf": {
      "type": "string",
      "minLength": 1,
      "maxLength": 128
    }
  },
  "additionalProperties": false
}

Responses

303

Full browser navigation to the configured destination. Never accept a caller-supplied redirect.

Response headers:

{
  "Location": {
    "schema": {
      "type": "string",
      "format": "uri"
    }
  },
  "Cache-Control": {
    "schema": {
      "const": "no-store"
    }
  }
}

400

Request rejected or dependency unavailable. Responses are never shared-cacheable.

Content type: application/json Schema reference: Error.

Field	Type	Required	Constraints / description
`error`	string	Yes	—
`message`	string	Yes	—
`requestId`	string	No	—

{
  "$ref": "#/components/schemas/Error"
}

401

Request rejected or dependency unavailable. Responses are never shared-cacheable.

Content type: application/json Schema reference: Error.

Field	Type	Required	Constraints / description
`error`	string	Yes	—
`message`	string	Yes	—
`requestId`	string	No	—

{
  "$ref": "#/components/schemas/Error"
}

403

Request rejected or dependency unavailable. Responses are never shared-cacheable.

Content type: application/json Schema reference: Error.

Field	Type	Required	Constraints / description
`error`	string	Yes	—
`message`	string	Yes	—
`requestId`	string	No	—

{
  "$ref": "#/components/schemas/Error"
}

429

Request rejected or dependency unavailable. Responses are never shared-cacheable.

Content type: application/json Schema reference: Error.

Field	Type	Required	Constraints / description
`error`	string	Yes	—
`message`	string	Yes	—
`requestId`	string	No	—

{
  "$ref": "#/components/schemas/Error"
}

503

Request rejected or dependency unavailable. Responses are never shared-cacheable.

Content type: application/json Schema reference: Error.

Field	Type	Required	Constraints / description
`error`	string	Yes	—
`message`	string	Yes	—
`requestId`	string	No	—

{
  "$ref": "#/components/schemas/Error"
}

Request errors and safe retries · Troubleshooting