Logout All Devices
POST /v1/users/auth/logout-all
Auth: Bearer JWT
No request body.
curl -X POST https://api.2settle.io/v1/users/auth/logout-all \
-H "Authorization: Bearer <accessToken>"
{ "success": true }
Notes:
- Revokes every refresh token on the account in one call — use it for "log out everywhere" / "I think my account is compromised" flows.
- Requires the access token (not a refresh token) because it acts on the whole account rather than a single session.