session cookie cleared on client side for logout/deauth

This commit is contained in:
Kaushik Narayan R 2024-01-08 20:09:10 -07:00
parent 143391507e
commit 2225f5db49
2 changed files with 8 additions and 4 deletions

View File

@ -135,10 +135,12 @@ const logout = async (req, res) => {
const delSession = req.session.destroy((err) => {
if (Object.keys(err).length) {
logger.error("Error while logging out", { err });
return res.sendStatus(500);
} else {
logger.info("Logged out.", { sessionID: delSession.id });
res.clearCookie("connect.sid");
return res.sendStatus(200);
}
return res.sendStatus(200);
})
} catch (error) {
logger.error('logout', { error });

View File

@ -13,12 +13,14 @@ const isAuthenticated = (req, res, next) => {
next()
} else {
const delSession = req.session.destroy((err) => {
if (err) {
if (Object.keys(err).length) {
logger.error("Error while destroying session.", { err });
return res.status(500).send("Server error, try later.");
} else {
logger.info("Session destroyed.", { sessionID: delSession.id });
logger.info("Session invalid, destroyed.", { sessionID: delSession.id });
res.clearCookie("connect.sid");
return res.sendStatus(401);
}
return res.sendStatus(401);
});
}
}