rust-authifier/src/web/session/logout.rs

/// Logout of current session
/// POST /session/logout
use rocket::State;

use crate::entities::*;
use crate::logic::Auth;
use crate::util::{EmptyResponse, Error, Result};

/// # Logout
///
/// Delete current session.
#[openapi(tag = "Session")]
#[post("/logout")]
pub async fn logout(auth: &State<Auth>, session: Session) -> Result<EmptyResponse> {
    session
        .delete(&auth.db)
        .await
        .map(|_| EmptyResponse)
        .map_err(|_| Error::DatabaseError {
            operation: "delete",
            with: "session",
        })
}

#[cfg(test)]
mod tests {
    use crate::test::*;

    #[cfg(feature = "async-std-runtime")]
    #[async_std::test]
    async fn success() {
        use rocket::http::Header;

        let (db, auth, session, _) = for_test_authenticated("logout::success").await;
        let client =
            bootstrap_rocket_with_auth(auth, routes![crate::web::session::logout::logout]).await;

        let res = client
            .post("/logout")
            .header(Header::new("X-Session-Token", session.token))
            .dispatch()
            .await;

        assert_eq!(res.status(), Status::NoContent);
        assert!(
            Session::find_one(&db, doc! { "_id": session.id.unwrap() }, None)
                .await
                .unwrap()
                .is_none()
        );
    }

    #[cfg(feature = "async-std-runtime")]
    #[async_std::test]
    async fn fail_invalid_session() {
        use rocket::http::Header;

        let client = bootstrap_rocket(
            "logout",
            "fail_invalid_session",
            routes![crate::web::session::logout::logout],
        )
        .await;

        let res = client
            .post("/logout")
            .header(Header::new("X-Session-Token", "invalid"))
            .dispatch()
            .await;

        assert_eq!(res.status(), Status::Unauthorized);
    }

    #[cfg(feature = "async-std-runtime")]
    #[async_std::test]
    async fn fail_no_session() {
        let client = bootstrap_rocket(
            "logout",
            "fail_no_session",
            routes![crate::web::session::logout::logout],
        )
        .await;

        let res = client.post("/logout").dispatch().await;

        assert_eq!(res.status(), Status::Unauthorized);
    }
}