From 73860170ae29c0e09382ac4672562026bb35401e Mon Sep 17 00:00:00 2001
From: euvre <93761161+euvre@users.noreply.github.com>
Date: Tue, 28 Jul 2026 19:22:57 +0800
Subject: [PATCH] fix(admin): use POST for admin logout API (#17482)

---
 admin/server/routes.py            | 2 +-
 web/src/services/admin-service.ts | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/admin/server/routes.py b/admin/server/routes.py
index f0a74ac7ee..e56f86f684 100644
--- a/admin/server/routes.py
+++ b/admin/server/routes.py
@@ -52,7 +52,7 @@ def login():
         return error_response(str(e), 500)
 
 
-@admin_bp.route("/logout", methods=["GET"])
+@admin_bp.route("/logout", methods=["POST"])
 @login_required
 def logout():
     try:
diff --git a/web/src/services/admin-service.ts b/web/src/services/admin-service.ts
index 7db75f4230..d29bd4a90b 100644
--- a/web/src/services/admin-service.ts
+++ b/web/src/services/admin-service.ts
@@ -150,7 +150,7 @@ type ResponseData<D = NonNullable<unknown>> = {
 
 export const login = (params: { email: string; password: string }) =>
   request.post<ResponseData<AdminService.LoginData>>(adminLogin, params);
-export const logout = () => request.get<ResponseData<boolean>>(adminLogout);
+export const logout = () => request.post<ResponseData<boolean>>(adminLogout);
 export const listUsers = () =>
   request.get<ResponseData<AdminService.ListUsersItem[]>>(adminListUsers, {});