Logout implementation in Flask - Practice Problems & Coding Challenges

Challenge - 5 Problems

❓ component_behavior

intermediate

What happens after calling logout_user() in Flask-Login?

Consider a Flask app using Flask-Login. After calling logout_user(), what is the state of current_user.is_authenticated?

Flask

from flask_login import logout_user, current_user

logout_user()
print(current_user.is_authenticated)

A None, because current_user becomes None after logout

B True, because logout_user() does not affect authentication state

C False, because the user is logged out and no longer authenticated

D Raises an exception because current_user is undefined after logout

💡 Hint

Think about what logout_user() does to the user session.

Calling logout_user() removes the user session, so current_user.is_authenticated becomes False.

📝 Syntax

intermediate

Which logout route code correctly logs out a user in Flask?

Choose the correct Flask route code that logs out the user and redirects to the home page.

Flask

from flask import redirect, url_for
from flask_login import logout_user

@app.route('/logout')
def logout():
    # logout code here
    return redirect(url_for('home'))

A

logout()
return redirect(url_for('home'))

B

logout_user
return redirect(url_for('home'))

C

logout_user()
return redirect('home')

D

logout_user()
return redirect(url_for('home'))

💡 Hint

Remember to call the function and use url_for for redirect.

Option D correctly calls logout_user() as a function and uses url_for to redirect.

🔧 Debug

advanced

Why does this logout route cause a runtime error?

Given this Flask logout route, why does it raise an error?

Flask

from flask import redirect, url_for
from flask_login import logout_user

@app.route('/logout')
def logout():
    logout_user
    return redirect(url_for('home'))

A logout_user is missing parentheses, causing a TypeError at runtime

B logout_user is not called as a function, so no logout happens and no error occurs

C url_for('home') is invalid and causes a KeyError

D The route decorator is missing parentheses, causing a SyntaxError

💡 Hint

Check how functions are called in Python.

Without parentheses, logout_user is a function object, not called. This causes a TypeError when Flask tries to execute the route.

❓ state_output

advanced

What is the session state after logout_user() is called?

In Flask with Flask-Login, after calling logout_user(), what happens to the session data related to the user?

Flask

from flask import session
from flask_login import logout_user

logout_user()
print('_user_id' in session)

A Raises KeyError because session is cleared completely

B False, because logout_user() removes the user_id from the session

C True, because logout_user() does not modify the session

D None, because session becomes None after logout

💡 Hint

Think about what Flask-Login stores in the session for logged-in users.

Flask-Login stores the user ID in the session under the key '_user_id'. logout_user() removes this key, so '_user_id' in session is False.

🧠 Conceptual

expert

Why is it important to protect the logout route with login_required?

In Flask-Login, why should the logout route usually be decorated with @login_required?

Flask

@app.route('/logout')
@login_required
def logout():
    logout_user()
    return redirect(url_for('home'))

A To prevent anonymous users from accessing logout and causing errors or confusing behavior

B To ensure logout_user() can only be called once per session

C To automatically redirect logged-out users to the login page

D To enable Flask-Login to track logout times for analytics

💡 Hint

Consider what happens if a user who is not logged in tries to logout.

Protecting logout with @login_required prevents anonymous users from calling logout_user(), which could cause unexpected behavior or errors.