pay3_session cookie in the response. After logout, any subsequent request using the same session token or cookie will receive a 401 Unauthorized response.
Endpoint
POST /api/auth/logout
Authentication is optional. If a valid pay3_session cookie or Authorization: Bearer <session-token> header is present, the session is revoked. If no token is present or the token has already expired, the endpoint still returns 204 No Content and clears the cookie — it is safe to call unconditionally during a sign-out flow.
Request Body
No request body is required for this endpoint.Response
A successful logout returns204 No Content with an empty body. The pay3_session cookie is cleared via the Set-Cookie response header.
There is no JSON body in the response. A
204 status with no content is the
only success indicator.