feat: add server logout handler (#5)

Co-authored-by: Yaël Guilloux <yael.guilloux@gmail.com>

Author: juni0r

src/module.ts

@@ -447,6 +447,10 @@ export default defineNuxtModule<ModuleOptions>({
         handler: resolveLocal('./runtime/api/auth/login'),
         route: '/api/auth/login',
       })
+      addServerHandler({
+        handler: resolveLocal('./runtime/api/auth/logout'),
+        route: '/api/auth/logout',
+      })
       addServerHandler({
         handler: resolveLocal('./runtime/api/auth/verify'),
         route: '/api/auth/verify',

src/runtime/api/auth/login.ts

@@ -1,4 +1,4 @@
-import { H3Error, defineEventHandler, readBody, setHeaders } from 'h3'
+import { H3Error, defineEventHandler, readBody, setCookie, setHeaders } from 'h3'
 import { useEdgeDbEnv, useEdgeDbPKCE } from '../../server'
 
 export default defineEventHandler(async (req) => {
@@ -50,8 +50,11 @@ export default defineEventHandler(async (req) => {
 
   const tokenResponseData = await tokenResponse.json()
 
-  setHeaders(req, {
-    'Set-Cookie': `edgedb-auth-token=${tokenResponseData.auth_token}; HttpOnly; Path=/; Secure; SameSite=Strict`,
+  setCookie(req, 'edgedb-auth-token', tokenResponseData.auth_token, {
+    httpOnly: true,
+    path: '/',
+    secure: true,
+    sameSite: true,
   })
 
   return tokenResponseData

src/runtime/api/auth/logout.ts

@@ -0,0 +1,18 @@
+import { H3Error, defineEventHandler, getCookie, setCookie } from 'h3'
+
+export default defineEventHandler(async (event) => {
+  const authToken = getCookie(event, 'edgedb-auth-token')
+  if (!authToken) {
+    const err = new H3Error('Not logged in')
+    err.statusCode = 401
+    return err
+  }
+
+  setCookie(event, 'edgedb-auth-token', '', {
+    httpOnly: true,
+    path: '/',
+    secure: true,
+    sameSite: true,
+    expires: new Date(0)
+  })
+})

src/runtime/plugin/edgedb-auth.ts

@@ -20,7 +20,7 @@ export default defineNuxtPlugin(async (nuxtApp) => {
   }
 
   const logout = async (redirectTo: string) => {
-    cookie.value = undefined
+    await $fetch('/api/auth/logout')
     identity.value = undefined
     if (redirectTo)
       await navigateTo(redirectTo)