on logout revoke access and refresh tokens

Author: supalarry

frontend/src/auth/logOut.js

@@ -1,6 +1,9 @@
 /* eslint-disable import/prefer-default-export */
+import Axios from 'axios';
 
 export const logOut = async () => {
+  await Axios.delete('/auth/access_revoke');
+  await Axios.delete('/auth/refresh_revoke');
   localStorage.removeItem(process.env.VUE_APP_ACCESS_TOKEN);
   localStorage.removeItem(process.env.VUE_APP_REFRESH_TOKEN);
   localStorage.removeItem(process.env.VUE_APP_VUEX_PERSISTED_STATE);

frontend/src/plugins/http.js

@@ -9,8 +9,10 @@ import { getAccessToken, getRefreshToken, handleAccessTokenExpiration } from '..
 Axios.defaults.baseURL = process.env.VUE_APP_BACKEND_BASE_URL;
 
 Axios.interceptors.request.use(async function (config) {
-  if (config.url === '/auth/refresh') {
+  if (config.url === '/auth/refresh' || config.url === '/auth/refresh_revoke') {
     config.headers.Authorization = `Bearer ${getRefreshToken()}`;
+  } else if (config.url === '/auth/access_revoke') {
+    config.headers.Authorization = `Bearer ${getAccessToken()}`;
   } else if (getAccessToken()) {
     await handleAccessTokenExpiration();
     if (getAccessToken()) {