Revoke API key

Session-only. Revoke a key immediately. Idempotent: revoking an already-revoked key returns the same success.

DELETE /keys/{id}

Revoke API key

cURL

curl --request DELETE \
  --url https://aropay.aro.media/api/v1/keys/{id} \
  --cookie aropay_session=

200

{
  "ok": "<unknown>",
  "data": {
    "revoked": "<unknown>"
  }
}

Authorizations

aropay_session · string · cookie · required

Browser session cookie minted by POST /auth/login (or passkey login). httpOnly, SameSite=Lax, 24 h TTL. Endpoints marked Session-only accept only this credential and return 403 session_required for API keys.

Path Parameters

id · string · required

API key ID (not the secret).

Response

200

application/json

Key revoked.

ok · any · required

data · object · required

Show child attributes