# Sign Out Elsewhere

End every session of the signed-in user except the one making the request. Every role may end its own.

## Overview

- Each other session ends as [End a Session](https://docs.aureahub.com/docs/auth-session-end.md) describes. `revoked` says how many were ended; `0` when there was none.
- `409` `SESSION_NOT_IDENTIFIED` when the access token names no session — it was issued where sessions are not kept ([Your Sessions](https://docs.aureahub.com/docs/auth-sessions.md)), so the others cannot be told apart from it. Nothing is ended.
- 20 requests per minute ([Rate Limits](https://docs.aureahub.com/docs/rate-limiting.md)).

## Endpoint

### `POST /v1/auth/sessions/revoke-others`

Authentication: bearer token required.

Ends every active session of the caller but the current one. No body.

**Responses**

`200` OK

```json
{
  "revoked": 2
}
```

`409` No session

```json
{
  "statusCode": 409,
  "error": "ConflictError",
  "message": "This access token names no session, so the others cannot be told apart from it",
  "details": { "code": "SESSION_NOT_IDENTIFIED" }
}
```

**Example request**

```bash
curl -X POST https://api.aureahub.com/v1/auth/sessions/revoke-others \
  -H "Authorization: Bearer YOUR_ACCESS_TOKEN"
```

---

Web version: https://docs.aureahub.com/#auth-sessions-revoke-others