Ability to invalidate a JWT token

Release date

September 5th, 2025

Release Type:

Informational, no action required from platforms

Summary

A new API endpoint has been introduced, allowing Platforms to programmatically invalidate JWT tokens. JWT tokens are used to invoke our SDK's, for context.

This enhancement provides greater control over session management and improves overall security.

How to invalidate a JWT token

  • Make a request to our new endpoint: POST /revoke_auth_token
  • Pass a body like so:
{
  "token": "${jwt}"
}
  • The response will be a "204 no context" on successful revoking of the JWT token.

Related Documentation