fix: try to remove the httponly cookie by setting it as expired (#298)

The issue do not occur in dev mode, which makes it hard to debug.
HemmeligOrg · Apr 26, 2024 · 3e2ca81 · 3e2ca81
1 parent 3af848b
commit 3e2ca81
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/server/controllers/authentication.js b/server/controllers/authentication.js
@@ -170,7 +170,10 @@ async function authentication(fastify) {
     );
 
     fastify.post('/signout', async (_, reply) => {
-        reply.clearCookie(COOKIE_KEY_PUBLIC, { path: '/' }).clearCookie(COOKIE_KEY, { path: '/' });
+        reply.clearCookie(COOKIE_KEY_PUBLIC, { path: '/' });
+
+        // clear the http only cookie by setting an expired date
+        reply.setCookie(COOKIE_KEY, '', { path: '/', expires: new Date(0) });
 
         return {
             signout: 'ok',