Function clearAuthCookies

server-source-code/internal/handler/auth.go:762–766

clearAuthCookies removes auth cookies (matches Node backend). Secure must match the original cookie for the browser to clear it.

(w http.ResponseWriter, r *http.Request)

// clearAuthCookies removes auth cookies (matches Node backend).
// Secure must match the original cookie for the browser to clear it.
func clearAuthCookies(w http.ResponseWriter, r *http.Request) {
	secure := isSecureRequest(r)
	http.SetCookie(w, &http.Cookie{Name: "token", Value: "", Path: "/", MaxAge: -1, HttpOnly: true, Secure: secure})
	http.SetCookie(w, &http.Cookie{Name: "refresh_token", Value: "", Path: "/", MaxAge: -1, HttpOnly: true, Secure: secure})
}

func (h *AuthHandler) createToken(userID, role string, expSec int64, sessionID string) (string, error) {
	claims := jwt.MapClaims{