End an active access session immediately
GET/computers/:computerId/expire
Expires the active JITA session of the caller (or, for an admin, of the user named by userId) on the computer.
The session expiry is moved to now and a worker removes the account from the local administrators group shortly after.
Authorization is the same as for the access request: callers act on their own session; acting for
another user requires the admin role (user and superadmin tokens get 403) and the target must be a system
administrator of the computer (otherwise 422). The t parameter is accepted by the shared parser but
ignored here.
Returns 422 No existing access requests found. when the target user has no session in the expiring (active) state; a
session that is still pending does not count. The call is idempotent: repeating it while the session is still listed
as expiring returns 200 again. Only GET is routed; POST returns 405.
Required role: any authenticated user (on-behalf requests need admin).
Request
Responses
- 200
- 401
- 403
- 404
- 422
Expiration requested.
No token, or the token is invalid or expired. The body is {message}: No auth token provided when no token is sent, otherwise the token check's message (jwt expired, jwt malformed, invalid signature, invalid token, jwt signature is required). Send Authorization: Bearer <token> exactly: the server drops the first seven characters of the header and reads the rest as the token, so a different scheme or an extra space fails. If Authorization is absent, the server reads a token field in the body, then a token query parameter, then x-access-token. Routes that validate query fields reject ?token= with 400 InvalidQuery.
The token's role is not allowed for this operation, or the token's scopes exclude the route
(Scope not allowed by token).
No record has the :id in the path (the id is malformed or unknown). The body is the bare text Invalid <Type> ID (for example Invalid Computer ID, Invalid User ID) with Content-Type text/html; charset=utf-8, not JSON. Some routes return an empty body.
No session in the expiring state (No existing access requests found.), or the on-behalf target is not a system administrator of the computer.