63 lines
1.8 KiB
TypeScript
63 lines
1.8 KiB
TypeScript
import { NextResponse } from "next/server";
|
||
import { auth } from "@/app/(auth)/auth";
|
||
import { revokeSingleActiveSession } from "@/lib/auth/session-control";
|
||
|
||
export async function POST() {
|
||
const isSecure = process.env.AUTH_URL?.startsWith("https://") ?? false;
|
||
const domain = process.env.AUTH_URL
|
||
? new URL(process.env.AUTH_URL).hostname
|
||
: undefined;
|
||
const session = await auth().catch(() => null);
|
||
|
||
// 创建清除 cookie 的响应
|
||
const response = NextResponse.json({ success: true });
|
||
|
||
if (session?.user?.id && session.user.type !== "guest") {
|
||
await revokeSingleActiveSession({
|
||
userId: session.user.id,
|
||
sessionKey: session.user.sessionKey,
|
||
}).catch((error) => {
|
||
console.error("[Logout API] Failed to revoke active session:", error);
|
||
});
|
||
}
|
||
|
||
// 清除所有认证相关的 cookie
|
||
const cookiesToClear = [
|
||
"__Secure-authjs.session-token",
|
||
"__Secure-authjs.callback-url",
|
||
"__Host-authjs.csrf-token",
|
||
"authjs.session-token",
|
||
"authjs.callback-url",
|
||
"authjs.csrf-token",
|
||
];
|
||
|
||
for (const cookieName of cookiesToClear) {
|
||
// 清除不带 domain 的 cookie
|
||
response.cookies.set(cookieName, "", {
|
||
expires: new Date(0),
|
||
path: "/",
|
||
secure: isSecure,
|
||
httpOnly: cookieName.includes("session-token") || cookieName.includes("csrf-token"),
|
||
sameSite: "lax",
|
||
});
|
||
|
||
// 如果有 domain，也清除带 domain 的 cookie
|
||
if (domain && domain !== "localhost" && !cookieName.startsWith("__Host-")) {
|
||
response.cookies.set(cookieName, "", {
|
||
expires: new Date(0),
|
||
path: "/",
|
||
domain,
|
||
secure: isSecure,
|
||
httpOnly:
|
||
cookieName.includes("session-token") ||
|
||
cookieName.includes("csrf-token"),
|
||
sameSite: "lax",
|
||
});
|
||
}
|
||
}
|
||
|
||
console.log("[Logout API] Cleared all auth cookies");
|
||
|
||
return response;
|
||
}
|