Delete a token
Deletes a token so it stops working at once. Use me to sign out the token you call with, for example when a shopper logs out.
Any token may delete itself with me, including a limited token. To delete another token you need a secret or trusted token with the auths delete permission.
AuthorizationBearer <token>A secret, trusted or limited token. See Authentication.
auth_id*stringThe token's auth_id, which is the SHA-256 hash of the full token in lower-case hex. Never put the full token in a URL. Use me for the token you call with.
The token is deleted. No body.
curl -X DELETE 'https://api.comecero.com/api/v1/auths/me'Update a token POST
Changes a secret token's label, expiry, roles or permissions. Only the fields you send change. Sending `roles` or `permissions` replaces that whole list. Trusted and limited tokens cannot be changed (`400`). The token you call with must hold every permission the updated token will have (`403` otherwise), and only a live token may change a live token. Secret and trusted tokens may call this with the `auths` update permission. This is true for `me` too: a token may not widen its own permissions.
Overview
Next Page