Unlink social provider REST API

DELETE

/api/user/security/social/{provider}

curl --request DELETE \
  --url http://127.0.0.1:25737/api/user/security/social/google \
  --header 'Content-Type: application/json' \
  --cookie hk_token=<hk_token> \
  --data '{ "current_password": "example" }'

Unlinks a provider only when another social provider, passkey, or recently confirmed enabled password remains usable. TOTP, recovery codes, email MFA, and team SSO do not satisfy this guard.

Authorizations

• cookieAuth

Parameters

Path Parameters

provider

required

string

Allowed values: google github microsoft

Request Body^required

Media typeapplication/json

object

current_password

string

Example^generated

{
  "current_password": "example"
}

Responses

204

Provider unlinked

404

Identity not linked

Media typeapplication/json

object

message

string

Example^generated

{
  "message": "example"
}

409

No alternative primary login method

Media typeapplication/json

object

message

string

Example^generated

{
  "message": "example"
}