This endpoint requires access to Account & Session Takeover Prevention (ASTP).
Please contact your Customer Success Manager for more details.
Prequisites
- Cookie monitoring must be enabled for your tenant. This feature must be activated by Flare Support.
- Access to a mechanism by which you may verify a cookie’s validity.
- Access to a mechanism by which you may invalidate a cookie.
Steps
1
Fetch one page of results
Use the
cookies/_search
endpoint to fetch one page of results.If next
is missing from the response (or is null), this means that you viewed all pages.2
Verify and Invalidate
Loop over the response’s items to verify the cookie’s validity and invalidate the cookie.
3
Ratelimit and go to step 1
Wait one second to avoid going over the API rate limit. Then, go back to step 1 to fetch the next page.
Full Project Template
Flare maintains a full project example on Github: It can serve as a starting point to implement automated session revocation in your organization.End-to-End API Example
This is an end-to-end example in Python.Python SDK Example
Python SDK Example