End the current session

Sign out and revoke the current customer session and its renewal token family.

DELETE/api/v1/traveler/session

Authorization

Use Authorization: Bearer with a customer access token. Every resource must belong to the signed-in identity’s authorized set.

Current session only

Request headers

AuthorizationBearer · required: A Wincora customer access token for the Traveler audience.

Response

204No content

A successful deletion has no response body.

Behavior to account for

Every resource is filtered by the signed-in identity’s current relationships. Customer-account membership alone grants no access. Tokens cannot call Tenant or Visa Intelligence endpoints.

Errors

Authentication failures return 401 or 403. Inaccessible resources return 404. Business and idempotency conflicts return 409. Rate limits return 429 with retry guidance.

Error handling guide

REQUESTCustomer token

curl --request DELETE 'https://api.wincora.com/api/v1/traveler/session' \
  --header 'Authorization: Bearer CUSTOMER_ACCESS_TOKEN'

const response = await fetch('https://api.wincora.com/api/v1/traveler/session', {
  method: 'DELETE',
  headers: {
    "Authorization": "Bearer " + process.env.WINCORA_CUSTOMER_TOKEN
  }
});

if (!response.ok) throw new Error(await response.text());
// No response body.

import os
import requests

response = requests.request(
    'DELETE',
    'https://api.wincora.com/api/v1/traveler/session',
    headers={
      "Authorization": "Bearer " + os.environ["WINCORA_CUSTOMER_TOKEN"]
    },
    timeout=30,
)
response.raise_for_status()

Keep the customer token in memory or behind your backend. Never put it in URLs, logs, or persistent browser storage.

Authorization

Request headers

Response

Behavior to account for

Errors

Continue exploring