cURL
Auth
Revoke the current JWT (jti goes onto the Redis denylist)
After this call the same JWT cannot be presented again — the gateway and FluideAuth refuse it with TOKEN_REVOKED. The SPA also clears its localStorage entry.
POST
cURL
Authorizations
Access token JWT. Use as Authorization: Bearer . In the API playground, paste the JWT only.
Complete HR staff first-access setup (single-use token + initial passwo…Start an OAuth flow and return the provider URL the browser should visit