ico
/
pingql
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

fix: logout properly expires cookie with matching domain/path attributes

This commit is contained in:
M1 2026-03-18 03:08:00 +04:00
parent 8221b3a33d
commit 3df7f4b702
2 changed files with 3 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
apps/web/src/routes/auth.ts
View File

@ -80,7 +80,7 @@ export const account = new Elysia({ prefix: "/account" })
}, { detail: { hide: true } })
.get("/logout", ({ cookie, set }) => {
cookie.pingql_key.remove();
cookie.pingql_key.set({ value: "", ...COOKIE_OPTS, maxAge: 0 });
set.redirect = "/dashboard";
}, { detail: { hide: true } })

3
apps/web/src/routes/dashboard.ts
View File

@ -103,7 +103,8 @@ export const dashboard = new Elysia()
// Logout
.get("/dashboard/logout", ({ cookie }) => {
cookie.pingql_key?.remove();
// Explicitly expire with same domain/path so browser actually clears it
cookie.pingql_key?.set({ value: "", maxAge: 0, path: "/", domain: process.env.COOKIE_DOMAIN ?? ".pingql.com", secure: process.env.NODE_ENV !== "development", sameSite: "lax" });
return redirect("/dashboard");
})