Skip to main content

Remove Token

Explicitly revoke a JWT token before its natural expiry.

Endpoint

POST /api/organization/removetoken
https://sandbox-services.mobileid.dj/api/organization/removetoken

Headers

HeaderRequiredDescription
WebMobileIDAuthorizationYesStatic API key assigned to your organization
OReferenceYesUUID identifying your organization
AuthorizationYesBearer YOUR_JWT_TOKEN — the token to revoke

Response

{
"message": "Token removed successfully"
}

Example Request

POST /api/organization/removetoken HTTP/1.1
Host: sandbox-services.mobileid.dj
WebMobileIDAuthorization: YOUR_WEB_MOBILEID_AUTHORIZATION_KEY
OReference: YOUR_ORGANIZATION_REFERENCE_UUID
Authorization: Bearer YOUR_JWT_TOKEN

Notes

  • Best practice: revoke the token once your workflow is complete, especially in server-side integrations.
  • Attempting to use a revoked token will result in an authentication error.