def logout():
response = make_response({
"status": "success",
"message": "logout successful"
})
unset_jwt_cookies(response)
return response
def delete(self, id):
"""Delete the user with the given ID."""
user = User.query.get_or_404(id, "The user does not exist")
user.delete()
response = jsonify(message="The user has been deleted")
unset_jwt_cookies(response)
return response, HTTPStatus.OK
def get(self):
try:
verify_jwt_in_request()
active_session_token = get_jwt()["jti"]
Session.get(token=active_session_token).update(active=False,
ignore_none=True,
persist=True)
except CSRFError:
pass
response: Response = jsonify({"message": "User logged out!"})
response.delete_cookie("csrftoken")
unset_jwt_cookies(response)
return response
def delete(self, user_id: int = None):
"""Deletes user's account permenantly"""
args = user_login_parser.parse_args()
user = User.get(id=user_id)
if user_id != current_user.id:
if g.identity.can(Permission(RoleNeed("admin"))):
return self.admin_delete_user(user)
raise InvalidUsage.user_not_authorized()
if (user.username != args.get("username", None)
or user.password != args.get("password", None)
or not args.get("confirm", False)):
raise UserExceptions.wrong_login_creds()
user.delete()
response: Response = jsonify(
{"message": "User Account deleted succefully!"})
unset_jwt_cookies(response)
return response
def logout():
resp = jsonify({'logout': True})
unset_jwt_cookies(resp)
return resp, 200
def logout():
"""Revoke the user's access and refresh token cookies."""
response = jsonify(msg="Logout successful")
unset_jwt_cookies(response)
return response, HTTPStatus.OK
