Remove Token
Explicitly revoke a JWT token before its natural expiry.
Endpoint
POST /api/organization/removetoken
https://sandbox-services.mobileid.dj/api/organization/removetoken
Headers
| Header | Required | Description |
|---|---|---|
WebMobileIDAuthorization | Yes | Static API key assigned to your organization |
OReference | Yes | UUID identifying your organization |
Authorization | Yes | Bearer YOUR_JWT_TOKEN — the token to revoke |
Response
{
"message": "Token removed successfully"
}
Example Request
POST /api/organization/removetoken HTTP/1.1
Host: sandbox-services.mobileid.dj
WebMobileIDAuthorization: YOUR_WEB_MOBILEID_AUTHORIZATION_KEY
OReference: YOUR_ORGANIZATION_REFERENCE_UUID
Authorization: Bearer YOUR_JWT_TOKEN
Notes
- Best practice: revoke the token once your workflow is complete, especially in server-side integrations.
- Attempting to use a revoked token will result in an authentication error.