fix: remove cookies when signout, logout (remote) and delete (remote)

This commit is contained in:
Mrugesh Mohapatra
2018-05-26 18:28:20 +05:30
parent 9cf1d67e02
commit eebe4036ec
3 changed files with 25 additions and 12 deletions

View File

@ -407,10 +407,15 @@ module.exports = function(User) {
);
};
User.afterRemote('logout', function(ctx, result, next) {
var res = ctx.res;
res.clearCookie('access_token');
res.clearCookie('userId');
User.afterRemote('logout', function({req, res}, result, next) {
const config = {
signed: !!req.signedCookies,
domain: process.env.COOKIE_DOMAIN || 'localhost'
};
res.clearCookie('jwt_access_token', config);
res.clearCookie('access_token', config);
res.clearCookie('userId', config);
res.clearCookie('_csrf', config);
next();
});