Fixed logout.

This commit is contained in:
Bradley Shellnut 2021-04-26 13:23:05 -07:00
parent 6c282c734c
commit 1f9d1531a2

View file

@ -1,6 +1,5 @@
import jwt from 'jsonwebtoken'
const JWTSignature = process.env.JWT_SIGNATURE
const { ROOT_DOMAIN, JWT_SIGNATURE } = process.env
export async function logUserOut(request, reply) {
try {
@ -9,12 +8,19 @@ export async function logUserOut(request, reply) {
if (request?.cookies?.refreshToken) {
const { refreshToken } = request.cookies
// Decode refresh token
const { sessionToken } = jwt.verify(refreshToken, JWTSignature)
const { sessionToken } = jwt.verify(refreshToken, JWT_SIGNATURE)
// Delete database record for session
await session.deleteOne({ sessionToken })
}
const cookieOptions = {
path: '/',
domain: ROOT_DOMAIN,
httpOnly: true,
secure: true,
}
// Remove cookies
reply.clearCookie('refreshToken').clearCookie('accessToken')
reply.clearCookie('refreshToken', cookieOptions).clearCookie('accessToken', cookieOptions)
} catch (e) {
console.error(e);
}