Sign out of a provider

Removes the provider’s stored credential from this machine’s keychain. Idempotent: a provider that holds no credential answers 204 too. An environment variable naming a key is never touched — nothing this operation can do removes it — so a provider covered by one goes on reading as authenticated afterwards.

DELETE /v1/providers/{name}/auth

Sign out of a provider

cURL

curl --request DELETE \
  --url https://api.example.com/v1/providers/{name}/auth \
  --header 'Authorization: Bearer <token>'

403

{
  "code": "NRY-0002",
  "title": "Session not found",
  "message": "No session with id 6b9f6d2e-1c3a-4f5b-9d7e-2a8c4e6f0b1d exists on this host."
}

Authorizations

Authorization · string · header · required

Enforced on every transport, with no exempt operation. A person's request must carry a JWT issued by the configured identity provider, which the host verifies itself against that issuer's key set: signature, issuer, expiry, and the person and organisation it names. Requests without a valid one receive 401 NRY-0011 — except a request with no token on a laptop's socket from the OS user the kernel names as the host's own, which is that machine's user.

Path Parameters

name · string · required

The provider's name.

Maximum string length: 128

Pattern: ^[a-z0-9][a-z0-9-]*$

Response

204

The credential is gone.