Logout

NOTE: Your application will need to redirect to this endpoint instead of making a direct API call. The redirect should use the vanity domain of the tenant whose user is being logged out.

Logs a user out of their session by extracting the session ID from the session cookie and destroying their auth session.

The end result of this API is an HTTP 302 redirect. The redirect destination rules apply in the order listed as follows:

1. Redirect to the value of the redirect_url query param, if provided.
2. Redirect to the client's loginUrl, if a client ID is provided and the client has a login URL configured.
3. Otherwise, redirect to the application loginUrl.