capabilities.work

Session Authenticate and Revoke

A 3-step recipe with Stytch. We can help you get access.

Recipe · 3 steps

Session Authenticate and Revoke

with Stytch · Identity & Access Management

Authenticate a session token, list active sessions, then revoke it.

  1. Authenticate the session token to confirm it is valid and resolve the owning user_id for the subsequent session lookup.
  2. Read the active sessions for the authenticated user before revoking.
  3. Revoke the session token to invalidate the session and log the user out.
What you'll need to have ready
  • session_token: The session token to validate and ultimately revoke.
  • session_duration_minutes: Optional value to extend the session lifetime on authentication.
For your developer

Arazzo workflow stytch:session-authenticate-revoke, 3 operations: api_session_v1_Authenticate → api_session_v1_Get → api_session_v1_Revoke. Specs on APIs.io.

More recipes with Stytch

B2B Create Organization and Invite MemberB2B Discovery Intermediate Session ExchangeB2B Email Magic Link Discovery and Organization CreateB2B Email OTP Discovery and ExchangeB2B Email OTP LoginB2B Organization Magic Link LoginB2B Create Organization and MemberB2B Password Authenticate and SessionB2B Recovery Codes Get and RotateB2B SMS OTP Multi-Factor Authentication