Update code in endpoints/logout.post.py
This commit is contained in:
parent
45f1f1f88f
commit
39e6a88b4e
@ -12,16 +12,27 @@ async def logout_handler(
|
||||
user = get_user_from_token(token, db)
|
||||
if not user:
|
||||
raise HTTPException(status_code=401, detail="Invalid authentication credentials")
|
||||
|
||||
# Clear access token, refresh token, and user session from cookies
|
||||
response = RedirectResponse(url="/")
|
||||
response.delete_cookie("access_token")
|
||||
response.delete_cookie("refresh_token")
|
||||
response.delete_cookie("session_id")
|
||||
|
||||
|
||||
# Clear access token
|
||||
access_tokens_db.pop(token, None)
|
||||
|
||||
# Clear refresh token
|
||||
refresh_token = user.refresh_token
|
||||
if refresh_token:
|
||||
refresh_tokens_db.pop(refresh_token, None)
|
||||
user.refresh_token = None
|
||||
|
||||
# Clear session data
|
||||
session_id = user.session_id
|
||||
if session_id:
|
||||
sessions_db.pop(session_id, None)
|
||||
user.session_id = None
|
||||
|
||||
db.commit()
|
||||
|
||||
return {
|
||||
"message": "Logout successful",
|
||||
"next_steps": [
|
||||
"Go to homepage"
|
||||
"Redirect to login page"
|
||||
]
|
||||
}
|
Loading…
x
Reference in New Issue
Block a user