summaryrefslogtreecommitdiff
path: root/docs/api
diff options
context:
space:
mode:
authorOwen Jacobson <owen@grimoire.ca>2025-08-24 04:10:28 -0400
committerOwen Jacobson <owen@grimoire.ca>2025-08-24 04:51:24 -0400
commitf6a79204c2ce9a15d7909c1c389417e0b7351cad (patch)
tree44ce77c5af10f2b90308ab31e9b383975ebfd280 /docs/api
parentb922c4646aac28fd5f762604e54fd050e973ecd3 (diff)
Add a missing docs note about the behaviour of `POST /api/auth/logout` when the current token is invalid.
It's inconsistent with the behaviour when the current token is unset. Shrug.
Diffstat (limited to 'docs/api')
-rw-r--r--docs/api/authentication.md4
1 files changed, 4 insertions, 0 deletions
diff --git a/docs/api/authentication.md b/docs/api/authentication.md
index f1c0aea..189103e 100644
--- a/docs/api/authentication.md
+++ b/docs/api/authentication.md
@@ -103,6 +103,10 @@ The response will include a `Set-Cookie` header that clears the `identity` cooki
Changes the current user's password, and invalidates all outstanding identity tokens.
+### Authentication failure
+
+This endpoint will respond with a status of `401 Unauthorized` if the provided identity token is not valid.
+
### Request
```json