Update src/routes/authRoutes.js

src/routes/authRoutes.js

@@ -32,12 +32,16 @@ router.get('/current_user', (req, res) => {
 
 
 // 4. Logout
-router.post('/logout', (req, res) => {
-  req.logout(() => {
-    req.session = null;
-    res.clearCookie('cragy_session');
-    res.status(200).json({ success: true });
+app.post('/auth/logout', (req, res) => {
+  req.logout?.(() => {}); // passport safe
+  req.session?.destroy(() => {
+    res
+      .clearCookie('cragy_session', { sameSite: 'none', secure: true })
+      .clearCookie('cragy_session.sig', { sameSite: 'none', secure: true })
+      .status(200)
+      .json({ success: true });
   });
 });
 
+
 export default router;