Authentication Revoke Token Guide

Latest Update Time: 2026-07-02 00:00:00

Use the revoke token API to invalidate and remove the current access token, for example when a user logs out.

See the Authentication Introduction for base URL, authentication, and required headers.

Endpoint

DELETE https://ppapi.qima.com/auth/v2/token

Prerequisites

• A valid access token to revoke (from Get Token or Refresh Token)

Query Parameters

Parameter	Required	Description
device-id	No	The device ID associated with the token to be revoked. Required only if the token was previously bound to a specific device.

Request Example

curl --location --request DELETE 'https://ppapi.qima.com/auth/v2/token' \
  --header 'Ai-Api-Access-Token: {your api access token}' \
  --header 'Authorization: Bearer {your token}' \
  --header 'Referer: https://preprodmy.qima.com/' \
  --header 'Ai-Api-Refresh-Key: {your refresh key}'

This endpoint requires Ai-Api-Refresh-Key in addition to Ai-Api-Access-Token, Authorization, and Referer.

Successful Response

HTTP 200 OK with an empty message means the token was removed successfully.

{
    "message": "",
    "content": ""
}

Common Errors

Status	Meaning	Recommended Action
401 Unauthorized	You are not authorized to remove this token.	Confirm the Authorization header contains the token you're trying to revoke, not a different session's token.
500 Internal Server Error	Error happened when removing token.	Contact QIMA support with the request time and token session details (do not share the raw token).

Next Steps

• After revoking, the token can no longer be used — call Get Token again to start a new session.