feat(auth): POST /v1/logout and admin logout revoke refresh session. Refs EventHub/EventHubBack#69

src/logic/logic_auth_session.erl

@@ -5,8 +5,8 @@
 %%%-------------------------------------------------------------------
 -module(logic_auth_session).
 -include("records.hrl").
--export([issue_admin_tokens/2, refresh_admin/1,
-  issue_user_tokens/2, refresh_user/1]).
+-export([issue_admin_tokens/2, refresh_admin/1, logout_admin/1,
+  issue_user_tokens/2, refresh_user/1, logout_user/1]).
 
 -define(USER_CLIENT_WEB, <<"web">>).
 
@@ -28,6 +28,10 @@ refresh_admin(RefreshToken) ->
     fun core_admin:get_by_id/1, admin, fun eventhub_auth:generate_admin_token/2,
     fun eventhub_auth:generate_admin_refresh_token/5, <<"admin">>).
 
+-spec logout_admin(RefreshToken :: binary()) -> ok | {error, atom()}.
+logout_admin(RefreshToken) ->
+  logout_subject(RefreshToken, fun eventhub_auth:verify_admin_refresh_token/1).
+
 %%%-------------------------------------------------------------------
 %%% User (фаза 2)
 %%%-------------------------------------------------------------------
@@ -46,10 +50,27 @@ refresh_user(RefreshToken) ->
     fun core_user:get_by_id/1, user, fun eventhub_auth:generate_user_token/2,
     fun eventhub_auth:generate_user_refresh_token/5, ?USER_CLIENT_WEB).
 
+-spec logout_user(RefreshToken :: binary()) -> ok | {error, atom()}.
+logout_user(RefreshToken) ->
+  logout_subject(RefreshToken, fun eventhub_auth:verify_user_refresh_token/1).
+
 %%%===================================================================
 %%% Internal
 %%%===================================================================
 
+logout_subject(RefreshToken, VerifyFn) ->
+  case VerifyFn(RefreshToken) of
+    {ok, Claims} ->
+      SessionId = maps:get(<<"sid">>, Claims),
+      case core_auth_session:revoke(SessionId) of
+        ok -> ok;
+        {error, not_found} -> ok;
+        {error, _} = Err -> Err
+      end;
+    {error, _} = Err ->
+      Err
+  end.
+
 issue_tokens(SubjectId, SubjectType, ClientType, Role, GenAccess, GenRefresh) ->
   {ok, Session} = core_auth_session:create(SubjectId, SubjectType, ClientType),
   AccessToken = GenAccess(SubjectId, Role),