Do a proper logout

dandiapi/api/templates/auth_style/base.html

@@ -0,0 +1,35 @@
+{% extends "auth_style/base.html" %}
+{% load allauth %}
+{% load i18n %}
+{% load static %}
+{% block body %}
+    <div class="flex flex-col sm:flex-row sm:navbar">
+        <span class="text-center sm:text-left sm:grow">{% include "auth_style/site_name.html" %}</span>
+        {# TODO: display username and user info #}
+        {% if user.is_authenticated %}
+            {% url 'account_logout' as logout_url_ %}
+            {% if logout_url_ %}
+                <a class="btn btn-ghost btn-sm" href="{{ logout_url_ }}">
+                    <i class="ri-logout-box-line ri-lg"></i>
+                    {% trans "Sign Out" %}
+                </a>
+            {% endif %}
+        {% else %}
+            {% url 'account_login' as login_url_ %}
+            {% if login_url_ %}
+                <a class="btn btn-ghost btn-sm" href="{{ login_url_ }}">
+                    <i class="ri-user-shared-line ri-lg"></i>
+                    {% trans "Sign In" %}
+                </a>
+            {% endif %}
+        {% endif %}
+    </div>
+    <div class="flex flex-col sm:mx-auto sm:w-full sm:max-w-lg">
+        <div class="my-6 shadow-sm card bg-base-100">
+            <div class="card-body">
+                {% block content %}
+                {% endblock content %}
+            </div>
+        </div>
+    </div>
+{% endblock %}

dandiapi/settings/base.py

@@ -111,10 +111,6 @@
 # for convenience serving a site on a subpath.
 STATIC_URL = 'static/'
 
-# Make Django and Allauth redirects consistent, but both may be changed.
-LOGIN_REDIRECT_URL = '/'
-ACCOUNT_LOGOUT_REDIRECT_URL = '/'
-
 CORS_ALLOWED_ORIGINS: list[str] = env.list('DJANGO_CORS_ALLOWED_ORIGINS', cast=str, default=[])
 CORS_ALLOWED_ORIGIN_REGEXES: list[str] = env.list(
     'DJANGO_CORS_ALLOWED_ORIGIN_REGEXES', cast=str, default=[]
@@ -183,6 +179,10 @@
     'DJANGO_DANDI_DOI_API_PREFIX'
 )  # This is used by us directly, but not in all circumstances
 
+# Make Django and Allauth redirects consistent, but both may be changed.
+LOGIN_REDIRECT_URL = '/'
+ACCOUNT_LOGOUT_REDIRECT_URL = DANDI_WEB_APP_URL
+
 # Non-required environment variabless
 _dandi_doi_api_url = cast('ParseResult | None', env.url('DJANGO_DANDI_DOI_API_URL', default=None))
 DANDI_DOI_API_URL: str | None = urlunparse(_dandi_doi_api_url) if _dandi_doi_api_url else None

web/src/rest.ts

@@ -82,6 +82,8 @@ const dandiRest = {
       user.value = null;
       localStorage.clear();
     }
+
+    window.location.href = 'http://localhost:8000/accounts/logout/'
   },
   async me(): Promise<User> {
     const { data: user } = await client.get('users/me/');