diff --git a/endpoints/logout.post.py b/endpoints/logout.post.py index 5aab278..01d3474 100644 --- a/endpoints/logout.post.py +++ b/endpoints/logout.post.py @@ -1,23 +1,28 @@ from fastapi import APIRouter, Depends, HTTPException from core.database import fake_users_db +from core.auth import get_current_user router = APIRouter() @router.post("/logout") async def logout_handler( - token: str = Depends(oauth2_scheme), - db: Session = Depends(get_db) + current_user: dict = Depends(get_current_user) ): """Demo logout endpoint""" - user = get_user_from_token(token, fake_users_db) - if not user: - raise HTTPException(status_code=401, detail="Invalid authentication credentials") + user_id = current_user.get("id") + if not user_id: + raise HTTPException(status_code=401, detail="User not authenticated") - # Invalidate token or update user session - revoke_token(token) - user["active_session"] = None + user = fake_users_db.get(user_id) + if not user: + raise HTTPException(status_code=404, detail="User not found") + + user["disabled"] = True return { "message": "Logout successful", - "user_id": user["id"] + "user_id": user_id, + "next_steps": [ + "Clear client-side session" + ] } \ No newline at end of file