Logout (single device)

[geolunalg]

EPIC: Epic: Authentication & Session Management (JWT + Refresh) #2065

Overview

User Story:
As a user, I want to log out so my session is ended on this device.

Action Items

Acceptance Criteria:

• POST /auth/logout:
  • revokes the refresh token record server-side
  • clears the refresh token cookie
• Subsequent refresh attempts fail with 401.

Resources/Instructions

REPLACE THIS TEXT - If there is a website that has documentation that helps with this issue provide the link(s) here.