diff --git a/endpoints/logout.post.py b/endpoints/logout.post.py index 4132d3d..dcad03c 100644 --- a/endpoints/logout.post.py +++ b/endpoints/logout.post.py @@ -1,24 +1,24 @@ from fastapi import APIRouter, Depends, HTTPException from core.database import fake_users_db -from core.auth import get_current_user router = APIRouter() @router.post("/logout") async def logout_handler( - current_user: dict = Depends(get_current_user) + token: str = Depends(oauth2_scheme), + db: Session = Depends(get_db) ): """Demo logout endpoint""" - if current_user["username"] not in fake_users_db: - raise HTTPException(status_code=400, detail="Invalid user") + user = get_user_from_token(token, db) + if not user: + raise HTTPException(status_code=401, detail="Invalid authentication credentials") - fake_users_db[current_user["username"]]["disabled"] = True + # Invalidate token or remove user session + invalidate_token(token) return { "message": "Logout successful", - "user": current_user["username"], "next_steps": [ - "Clear session data", - "Revoke access token" + "Redirect to login page" ] } \ No newline at end of file