Update src/app/api/auth/logout/route.ts

src/app/api/auth/logout/route.ts

@@ -9,11 +9,15 @@ export async function POST(request: NextRequest) {
       await deleteSession(token);
     }
 
+    // ── Determine if behind HTTPS proxy ───────────────────────────────
+    const forwardedProto = request.headers.get('x-forwarded-proto');
+    const isSecure = forwardedProto === 'https' || process.env.NODE_ENV === 'production';
+
     const response = NextResponse.json({ success: true });
 
     response.cookies.set(SESSION_COOKIE_NAME, '', {
       httpOnly: true,
-      secure: true,
+      secure: isSecure,
       sameSite: 'lax',
       path: '/',
       maxAge: 0,