Revoke ALL trusted devices for a target user (admin)

Revokes every active trusted-device row for the target. Audit log records the admin’s id and actorType: 'admin' (or ‘super’). Does NOT invalidate the target’s existing JWT — only forces fresh MFA on their next login (design Q9 grandfather rule).

DELETE /api/admin/users/{userId}/trusted-devices

Revoke ALL trusted devices for a target user (admin)

cURL

curl --request DELETE \
  --url https://pria.praxislxp.com/api/admin/users/{userId}/trusted-devices \
  --header 'Authorization: Bearer <token>'

200

{
  "success": true,
  "revoked": 123
}

Authorizations

Authorization · string · header · required

JWT token passed in authorization header

Path Parameters

userId · string · required

Response

200

application/json

Devices revoked.

success · boolean

revoked · integer