external/aurweb
0
0
Fork 0
mirror of https://gitlab.archlinux.org/archlinux/aurweb.git synced 2025-02-03 10:43:03 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

change(fastapi): remove the GET /logout route; replaced with POST

Browse source 
Had to add some additional CSS in to style a form button the same
as <a> links are styled.

Closes #188

Signed-off-by: Kevin Morris <kevr@0cost.org>
This commit is contained in:
Kevin Morris 2021-11-29 16:51:16 -08:00
parent 44f2366675
commit 69eb17cb0d
No known key found for this signature in database
GPG key ID: F7E46DED420788F3
4 changed files with 25 additions and 17 deletions
Download patch file Download diff file Expand all files Collapse all files

15
aurweb/routers/auth.py
View file

@ -77,14 +77,9 @@ async def login_post(request: Request,
return response
@router.get("/logout")
@router.post("/logout")
@auth_required()
async def logout(request: Request, next: str = "/"):
""" A GET and POST route for logging out.
@param request FastAPI request
@param next Route to redirect to
"""
async def logout(request: Request, next: str = Form(default="/")):
if request.user.is_authenticated():
request.user.logout(request)
@ -95,9 +90,3 @@ async def logout(request: Request, next: str = "/"):
response.delete_cookie("AURSID")
response.delete_cookie("AURTZ")
return response
@router.post("/logout")
@auth_required()
async def logout_post(request: Request, next: str = "/"):
return await logout(request=request, next=next)