api auth

Hello all. I'm attempting to verify that the user is logged into their xenforo account via cURL and a C++ application. I would like to avoid using the API due to the insecure nature of an API key in a compiled file which will be sent to forum members. So far I've been able to verify the user is...

Is there API that would logout a user - invalidate all authenticated active sessions for the user. Need this to integrate into my main site 'logout' flow, so that user logouts in one place only. Looked over documentation but did not find an answer. Thanks!

xf_user cookie has urlencoded comma value stored (i.e. 'n%2Cnnnnnnnnn...' instead of just 'n,nnnnnn....'), thus making /api/auth/from-session failing when passing that value as is. I had to look through the /api source code in order to understand what is wrong and why it did not like my valid...