diff --git a/server/controllers/authentication.js b/server/controllers/authentication.js index 1fac7358..bfda4a88 100644 --- a/server/controllers/authentication.js +++ b/server/controllers/authentication.js @@ -170,7 +170,10 @@ async function authentication(fastify) { ); fastify.post('/signout', async (_, reply) => { - reply.clearCookie(COOKIE_KEY_PUBLIC, { path: '/' }).clearCookie(COOKIE_KEY, { path: '/' }); + reply.clearCookie(COOKIE_KEY_PUBLIC, { path: '/' }); + + // clear the http only cookie by setting an expired date + reply.setCookie(COOKIE_KEY, '', { path: '/', expires: new Date(0) }); return { signout: 'ok',