django test framework token authentication — is there any way to log everyone out?

user_5509839 0
Viewed 45

I understand that token authentication doesnt really have the concept of logging out— that a token merely identifies a user.

Is there any way to invalidate all tokens? Maybe via the change of some variable from which all the tokens are generated— causing everyone to need to log in again?

django-rest-framework django python
1 Answers

I guess it depends a bit on which auth system you are using. In case you are using rest_framework.authtoken, you could simply clear the Token table:

from rest_framework.authtoken.models import Token
Token.objects.all().delete();

No token, not logged in ;)

user_14370430
Related