> ## Documentation Index
> Fetch the complete documentation index at: https://docs.sagescreen.dev/llms.txt
> Use this file to discover all available pages before exploring further.

# Log out (session + JWT)

> Revokes the stored JWT token, destroys the WordPress session,
and returns a redirect to `/login`.

Registered as `wp_ajax_sagescreen_logout` — **login required**.




## OpenAPI

````yaml /openapi/private/specs/wp/auth.yml post /wp-admin/admin-ajax.php?action=sagescreen_logout
openapi: 3.1.0
info:
  title: SageScreen — Auth Module
  description: >
    Authentication and session management. Handles JWT token lifecycle

    (issue, refresh, validate, revoke) and WordPress-based login/logout

    with reCAPTCHA/Turnstile protection.


    Uses RS256-signed JWTs stored in the `wp_sage_screen_jwt` table.

    Tokens have a configurable TTL (`sage_screen_jwt_expires`, default 3600 s)

    and a separate refresh window (`sage_screen_jwt_refresh_expires`, default
    604800 s / 7 days).
  version: 1.0.0
servers:
  - url: https://{domain}/wp-json/sagescreen/v1
    description: WordPress REST API
    variables:
      domain:
        default: api.sagescreen.app
security: []
tags:
  - name: Auth – REST
    description: JWT token endpoints (REST API)
  - name: Auth – AJAX
    description: Session-based login / logout / password flows (AJAX)
paths:
  /wp-admin/admin-ajax.php?action=sagescreen_logout:
    post:
      tags:
        - Auth – AJAX
      summary: Log out (session + JWT)
      description: |
        Revokes the stored JWT token, destroys the WordPress session,
        and returns a redirect to `/login`.

        Registered as `wp_ajax_sagescreen_logout` — **login required**.
      operationId: ajaxLogout
      requestBody:
        required: true
        content:
          application/x-www-form-urlencoded:
            schema:
              type: object
              required:
                - action
                - nonce
              properties:
                action:
                  type: string
                  const: sagescreen_logout
                nonce:
                  type: string
                  description: WP nonce for `sagescreen_logout`
      responses:
        '200':
          description: Logout result
          content:
            application/json:
              schema:
                oneOf:
                  - $ref: '#/components/schemas/AjaxLogoutSuccess'
                  - $ref: '#/components/schemas/AjaxErrorResponse'
              examples:
                success:
                  summary: Logged out
                  value:
                    success: true
                    data:
                      message: Logged out successfully
                      redirect_to: /login
                nonceFail:
                  summary: Nonce check failed
                  value:
                    success: false
                    data: Security check failed
      security:
        - wpAjaxNonce: []
components:
  schemas:
    AjaxLogoutSuccess:
      type: object
      properties:
        success:
          type: boolean
          const: true
        data:
          type: object
          required:
            - message
            - redirect_to
          properties:
            message:
              type: string
              examples:
                - Logged out successfully
            redirect_to:
              type: string
              examples:
                - /login
    AjaxErrorResponse:
      type: object
      description: |
        Standard AJAX error. The `data` field is either a plain string
        or an object with additional context (e.g. `no_council: true`).
      properties:
        success:
          type: boolean
          const: false
        data:
          oneOf:
            - type: string
              examples:
                - Security check failed
            - type: object
              properties:
                message:
                  type: string
                no_council:
                  type: boolean
  securitySchemes:
    wpAjaxNonce:
      type: apiKey
      in: query
      name: nonce
      description: WordPress AJAX nonce (passed as form field, verified per-action)

````