Token revocation endpoint

auth.py

@@ -286,6 +286,16 @@ def profile():
     return 'You are logged in as {}'.format(current_user.email)
 
 
+@app.route('/token/<int:id>/revoke', methods=['POST'])
+@login_required
+def token_revoke(id):
+    token = Token.query.filter(Token.user == current_user.username, Token.id == id).first()
+    if not token:
+        flask.abort(404)
+    token.delete()
+    return redirect('/')
+
+
 @app.route('/login', methods=['GET', 'POST'])
 def login():
     form = LoginForm()