Laravel 5.1 POST to Log Out

!Laravel-POST-to-Log-Out.md

Using POST vs. GET to log out

• What Http verb should the route to log out of your web app be?
• Logout: GET or POST?

_logout_form.blade.php

<?php

// partial in app/resources/views/auth
// uses Laravel Collective Forms & HTML package
// http://laravelcollective.com/docs/5.1/html

{!! Form::open([
    'route' => 'logout.post',
    'name' => 'logout-form',
    'id' => 'logout-form',
]) !!}

{!! Form::button('Log Out', [
    'type' => 'submit'
]) !!}

{!! Form::close() !!}

_logout_form.blade_alt.php

<?php

// partial in app/resources/views/auth
// alternate Blade version without package dependency

<form method="POST" action="{{ route('logout.post') }}" accept-charset="UTF-8" name="logout-form" id="logout-form">
    {{ csrf_field() }}
    <button type="submit">Log Out</button>
</form>

AuthController.php

<?php

// add to app/Http/Auth/AuthController.php

/**
 * Handle a logout request to the application.
 *
 * @return \Illuminate\Http\Response
 */
public function postLogout()
{
    Auth::logout();
    return redirect(property_exists($this, 'redirectAfterLogout') ? $this->redirectAfterLogout : '/');
}

routes.php

<?php

// add to app/Http/routes.php

Route::post('/logout', [
    'as' => 'logout.post',
    'uses' => 'Auth\AuthController@postLogout',
]);