How do I implement logout functionality with Flask-JWT-Extended?

How do I implement logout functionality with Flask-JWT-Extended?

To implement logout with Flask-JWT-Extended, you can use the 'jwt_blacklist' feature to revoke tokens.

Can you show me a code example for that?

Sure! First, ensure you have the blacklist feature enabled in your Flask app. Then, you can create a logout route like this:

from flask import Flask, jsonify
from flask_jwt_extended import JWTManager, jwt_required, get_jwt_identity, create_access_token, create_refresh_token, jwt_blacklist

app = Flask(__name__)
app.config['JWT_SECRET_KEY'] = 'your_secret_key'
app.config['JWT_BLACKLIST_ENABLED'] = True

jwt = JWTManager(app)

@jwt.token_in_blacklist_loader
def check_if_token_in_blacklist(jwt_header, jwt_payload):
    jti = jwt_payload['jti']
    return jti in jwt_blacklist

@app.route('/logout', methods=['POST'])
@jwt_required()
def logout():
    jti = get_jwt()['jti']
    jwt_blacklist.add(jti)
    return jsonify(msg='Successfully logged out'), 200

What if I want to allow users to log out from all devices?

In that case, you can implement a global logout feature by clearing all tokens associated with the user in your database.