diff --git a/endpoints/logout.post.py b/endpoints/logout.post.py index f296624..4132d3d 100644 --- a/endpoints/logout.post.py +++ b/endpoints/logout.post.py @@ -1,21 +1,24 @@ from fastapi import APIRouter, Depends, HTTPException from core.database import fake_users_db +from core.auth import get_current_user router = APIRouter() @router.post("/logout") async def logout_handler( - token: str = Depends(oauth2_scheme), - db: Session = Depends(get_db) + current_user: dict = Depends(get_current_user) ): """Demo logout endpoint""" - user = get_user_by_token(token, db) - if not user: - raise HTTPException(status_code=401, detail="Invalid authentication credentials") + if current_user["username"] not in fake_users_db: + raise HTTPException(status_code=400, detail="Invalid user") - fake_users_db[user["username"]]["disabled"] = True + fake_users_db[current_user["username"]]["disabled"] = True return { "message": "Logout successful", - "user": user["username"] + "user": current_user["username"], + "next_steps": [ + "Clear session data", + "Revoke access token" + ] } \ No newline at end of file