revoke access_tokens

2026-09-05 20:26:42 +03:00
parent da8284ae64
commit c4a6a88d05
4 changed files with 34 additions and 10 deletions
@@ -62,10 +62,12 @@ async def get_refresh_token(request:Request,
@router.get("/logout")
 async def logout(response:Response,
                 refresh_token: str = Cookie(),
+                 access_token: str = Depends(oauth2_schema),
                 auth:CurrentUserService=Depends(auth_service),
                 current_user:UserOut=Depends(require_permissions()))->bool:
+    
    response.delete_cookie("refresh_token")
-    return await auth.logout(refresh_token)
+    return await auth.logout(refresh_token, access_token)

@router.get("")
 async def protected(current_user:UserOut=Depends(require_permissions()))->dict: