Revoke a subject's tokens

DELETE

/subjects/{subject}/tokens

Immediately invalidates EVERY token previously minted for this
subject, regardless of each token's own unexpired lifetime. This is
the only revocation mechanism for a subject token (tokens are
stateless — there is no per-token record to delete). Works on a
subject in any non-deleted standing, including one already
suspended.

Request

Authorization

API Key

Add parameter in header

x-api-key

Example:

x-api-key: ********************

Bearer Token

Provide your bearer token in the

Authorization

header when making requests to protected resources.

Example:

Authorization: Bearer ********************

Path Params

Responses

🟢200OK

application/json

The subject's tokens were revoked.

Bodyapplication/json

🟠401Unauthorized

🟠403Forbidden

🟠404Record Not Found

🟠429

Request Example

Shell

JavaScript

Java

Swift

curl --location --request DELETE 'https://upload.tf/api/v1/subjects/ext:end-user-42/tokens' \
--header 'x-api-key: <api-key>'

Response Example

200 - Example 1

{
    "success": true,
    "data": {
        "subjectId": "68460e63-0717-47f9-8fd8-d28f152cb30b",
        "tokensRevokedAfter": "2019-08-24T14:15:22.123Z"
    }
}

Modified at 2026-08-18 09:08:48

Mint a subject token

List a subject's sites