|
25 | 25 | from flask_jwt_extended import create_refresh_token |
26 | 26 | from flask_jwt_extended import get_jti |
27 | 27 | from flask_jwt_extended import get_jwt_identity |
28 | | -from flask_jwt_extended import get_raw_jwt |
29 | 28 | from flask_jwt_extended import jwt_refresh_token_required |
30 | | -from flask_jwt_extended import jwt_required |
31 | 29 | from PyMatcha import ACCESS_TOKEN_EXPIRES |
32 | 30 | from PyMatcha import redis |
33 | 31 | from PyMatcha import REFRESH_TOKEN_EXPIRES |
@@ -89,17 +87,15 @@ def refresh(): |
89 | 87 | return SuccessOutput("access_token", access_token) |
90 | 88 |
|
91 | 89 |
|
92 | | -@auth_login_bp.route("/auth/access_revoke", methods=["DELETE"]) |
93 | | -@jwt_required |
| 90 | +@auth_login_bp.route("/auth/logout", methods=["POST"]) |
| 91 | +@validate_params({"access_token": str, "refresh_token": str}) |
94 | 92 | def logout(): |
95 | | - jti = get_raw_jwt()["jti"] |
96 | | - redis.set("is_revoked_jti:" + jti, "true", ACCESS_TOKEN_EXPIRES * 1.2) |
97 | | - return Success("Access token revoked") |
98 | | - |
99 | | - |
100 | | -@auth_login_bp.route("/auth/refresh_revoke", methods=["DELETE"]) |
101 | | -@jwt_refresh_token_required |
102 | | -def logout2(): |
103 | | - jti = get_raw_jwt()["jti"] |
104 | | - redis.set("is_revoked_jti:" + jti, "true", REFRESH_TOKEN_EXPIRES * 1.2) |
105 | | - return Success("Refresh token revoked") |
| 93 | + data = request.get_json() |
| 94 | + access_token = data["access_token"] |
| 95 | + refresh_token = data["refresh_token"] |
| 96 | + print(access_token, refresh_token) |
| 97 | + access_jti = get_jti(access_token) |
| 98 | + refresh_jti = get_jti(refresh_token) |
| 99 | + redis.set("is_revoked_jti:" + access_jti, "true", ACCESS_TOKEN_EXPIRES * 1.2) |
| 100 | + redis.set("is_revoked_jti:" + refresh_jti, "true", REFRESH_TOKEN_EXPIRES * 1.2) |
| 101 | + return Success("Logout successful.") |
0 commit comments