Sign out
Revokes the session of the Bearer token and clears the media cookie. No body.
Try the REST routes against the public demo at https://demostash.aldyernesto.my.id. Get a read-only token (valid for 60 minutes), then paste it as the Bearer token in the console of any route.
Revokes the session of the Bearer token and clears the media cookie. No body.
SessionTokenAuthorizationBearer <token>Session token from POST /api/v1/auth/login or the login mutation, sent as Authorization: Bearer <token>.
Signed out
application/json- response
ok*trueAlways true.
truecurl -X POST "https://example.com/api/v1/auth/logout"{ "ok": true}Sign in POST
Email and password in and a Bearer token out; also sets the shotstash_session media cookie. Rate limited to 10 attempts per 15 minutes per IP and per email.
Demo try-it session POST
Public demo instances only (SHOTSTASH_DEMO_MODE): a 60-minute session of the read-only demo viewer for the docs try-it console. It never slides; every write with it is refused. Rate limited to 10 per hour per IP. A browser Origin must be the instance itself or listed in SHOTSTASH_CORS_ORIGINS. 404 on every other instance.