Revoke the caller's stored Google Services token

Clears the caller’s stored Google OAuth token from the database — institution-specific (UserInstitution.googleLoginToken) when the JWT has institution context, otherwise personal (User.googleLoginToken). Best-effort: also calls Google’s https://oauth2.googleapis.com/revoke to invalidate the token at Google’s end. If the upstream call fails (e.g. token already expired), the local database is still cleared and the endpoint still returns success.

DELETE /api/auth/google/services/revoke

Revoke the caller's stored Google Services token

cURL

curl --request DELETE \
  --url https://pria.praxislxp.com/api/auth/google/services/revoke \
  --header 'Authorization: Bearer <token>'

200

{
  "success": true,
  "message": "Google services access revoked"
}

Authorizations

Authorization · string · header · required

JWT token passed in authorization header

Response

200

application/json

Token cleared locally (Google upstream revoke is best-effort).

success · boolean

Example:

true

message · string

Example:

"Google services access revoked"