Signing Out

As discussed in Section 8.1, our authentication model is to keep users signed in until they sign out explicitly. In this section, we’ll add this necessary signout capability.

            So far, the Sessions controller actions have followed the RESTful convention of using new for a signin page and create to complete the signin. We’ll continue this theme by using a destroy action to delete sessions, i.e., to sign out. To test this, we’ll click on the ‘‘Sign out’’ link and then look for the reappearance of the signin link (Listing 8.28).

________________________________________________________________________________________________

As with user signin, which relied on the sign_in function, user signout just defers to a sign_out function (Listing 8.29).