fix: 修复登出实现

2025-12-18 17:06:28 +08:00
parent 6563c783db
commit 21c010d131
1 changed files with 9 additions and 3 deletions
--- a/apps/backend/src/auth/auth.controller.ts
+++ b/apps/backend/src/auth/auth.controller.ts
@@ -151,9 +151,15 @@ export class AuthController {

  @UseGuards(AuthGuard)
  @Post('logout')
-  async logout(@CurrentUser() user: AuthUser) {
-    const { userId, sessionId } = user;
-    await this.userSessionService.invalidateSession(userId, sessionId);
+  async logout(@CurrentUser() user: AuthUser, @Res({ passthrough: true }) res: Response) {
+    const { sessionId } = user;
+    await this.userSessionService.invalidateSession(sessionId, '用户主动登出');
+    res.clearCookie('session', {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === 'production',
+      sameSite: 'lax',
+      path: '/',
+    })
    return true;
  }
 }