Function clearDeviceTrustCookie

server-source-code/internal/handler/auth.go:108–118

clearDeviceTrustCookie expires the trust cookie on the client. Called only on explicit revocation paths, never on ordinary logout.

(w http.ResponseWriter, r *http.Request)

// clearDeviceTrustCookie expires the trust cookie on the client. Called only
// on explicit revocation paths, never on ordinary logout.
func clearDeviceTrustCookie(w http.ResponseWriter, r *http.Request) {
	http.SetCookie(w, &http.Cookie{
		Name:     DeviceTrustCookieName,
		Value:    "",
		Path:     "/",
		MaxAge:   -1,
		HttpOnly: true,
		Secure:   isSecureRequest(r),
		SameSite: http.SameSiteLaxMode,
	})
}

// LoginRequest is the request body for login.
type LoginRequest struct {