list-ukl83v/endpoints/logout.post.py
2025-03-21 17:02:42 +01:00

24 lines
688 B
Python

from fastapi import APIRouter, Depends, HTTPException
from core.database import fake_users_db
from core.auth import get_current_user
router = APIRouter()
@router.post("/logout")
async def logout_handler(
current_user: dict = Depends(get_current_user)
):
"""Demo logout endpoint"""
if current_user["username"] not in fake_users_db:
raise HTTPException(status_code=400, detail="Invalid user")
fake_users_db[current_user["username"]]["disabled"] = True
return {
"message": "Logout successful",
"user": current_user["username"],
"next_steps": [
"Clear session data",
"Revoke access token"
]
}