fix: remove cookies when signout, logout (remote) and delete (remote)

2018-05-26 18:28:20 +05:30
parent 9cf1d67e02
commit eebe4036ec
3 changed files with 25 additions and 12 deletions
--- a/server/boot/authentication.js
+++ b/server/boot/authentication.js
@@ -59,10 +59,14 @@ module.exports = function enableAuthentication(app) {
          }
        );
      }
-      res.clearCookie('jwt_access_token');
-      res.clearCookie('access_token');
-      res.clearCookie('userId');
-      res.clearCookie('_csrf');
+      const config = {
+        signed: !!req.signedCookies,
+        domain: process.env.COOKIE_DOMAIN || 'localhost'
+      };
+      res.clearCookie('jwt_access_token', config);
+      res.clearCookie('access_token', config);
+      res.clearCookie('userId', config);
+      res.clearCookie('_csrf', config);
      res.redirect('/');
   });
  });