Skip to main content
POST
/
devices
/
users
/
{userId}
/
revoke-all
curl -X POST "https://api.tktchurch.com/v1/devices/users/123e4567-e89b-12d3-a456-426614174000/revoke-all" \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."
This endpoint requires authentication and the viewUserDevices permission.

​
Path Parameters

​
userId
string
required
The UUID of the user whose devices to revoke

​
Response

A successful request returns HTTP 204 No Content status. The following actions are performed:
  1. If the current device belongs to the target user, it is preserved
  2. All other refresh tokens for the user are blacklisted
  3. All associated access tokens are blacklisted
  4. The blacklisted tokens are removed from the database

​
Error Responses

​
error
object
Error details when the request fails
Common error cases:
  • 400 Bad Request: Invalid user ID format
  • 401 Unauthorized: Missing or invalid access token
  • 403 Forbidden: Insufficient permissions (missing viewUserDevices)
  • 404 Not Found: User not found
curl -X POST "https://api.tktchurch.com/v1/devices/users/123e4567-e89b-12d3-a456-426614174000/revoke-all" \
  -H "Authorization: Bearer eyJhbGciOiJIUzI1NiIs..."