Update code in endpoints/logout.post.py
This commit is contained in:
parent
a1752eca21
commit
b291f49d2d
@ -5,21 +5,25 @@ router = APIRouter()
|
|||||||
|
|
||||||
@router.post("/logout")
|
@router.post("/logout")
|
||||||
async def logout_handler(
|
async def logout_handler(
|
||||||
user_id: str = Depends(get_current_user_id)
|
session_id: str,
|
||||||
|
access_token: str = Depends(...),
|
||||||
|
refresh_token: str = Depends(...),
|
||||||
|
db: Session = Depends(get_db)
|
||||||
):
|
):
|
||||||
"""Demo logout endpoint"""
|
"""Demo logout endpoint"""
|
||||||
if user_id not in fake_users_db:
|
user = fake_users_db.get(session_id)
|
||||||
raise HTTPException(status_code=404, detail="User not found")
|
if not user:
|
||||||
|
raise HTTPException(status_code=400, detail="Invalid session")
|
||||||
|
|
||||||
# Clear access token, refresh token and session
|
# Clear session data
|
||||||
fake_users_db[user_id]["access_token"] = None
|
user["session_id"] = None
|
||||||
fake_users_db[user_id]["refresh_token"] = None
|
user["access_token"] = None
|
||||||
fake_users_db[user_id]["session"] = None
|
user["refresh_token"] = None
|
||||||
|
|
||||||
return {
|
# Clear cookies
|
||||||
"message": "Logout successful",
|
response = JSONResponse(content={"message": "Logout successful"})
|
||||||
"next_steps": [
|
response.delete_cookie("access_token")
|
||||||
"Clear client-side session data",
|
response.delete_cookie("refresh_token")
|
||||||
"Redirect to login page"
|
response.delete_cookie("session_id")
|
||||||
]
|
|
||||||
}
|
return response
|
Loading…
x
Reference in New Issue
Block a user