Report a sign-in the user does not recognise, from the "This wasn't me" link in a login notification email. Revokes the active session, expires remembered devices and forces a password change on the next login.

Anonymous by design: the single-use token from the email is the credential, and the
caller has just been locked out of their account.

Body Params

Body of POST api/security/login-not-me — the token travels in the body rather than the
query string so it stays out of server logs and browser history.

string | null
Headers
string
enum
Defaults to application/json

Generated from available response content types

Allowed:
string
enum
Defaults to application/json

Generated from available request content types

Allowed:
Response

Language
Credentials
Bearer
JWT
LoadingLoading…
Response
Click Try It! to start a request and see the response here! Or choose an example:
text/plain
application/json
text/json