logout functionality and documentation

app/controllers/auth.controller.js

@@ -377,12 +377,57 @@ exports.resetPassword = async (req, res) => {
 
 
 // Logout: Clear the JWT cookie
-exports.logout = (req, res) => {
-  res.clearCookie("access_token", {
-    httpOnly: true,
-    secure: process.env.NODE_ENV === "production",
-    sameSite: process.env.NODE_ENV === "production" ? "None" : "Lax",
-  });
+exports.logout = async (req, res) => {
+  try {
+    // 1. Get refresh token from cookie
+    const refreshToken = req.cookies?.refresh_token;
 
-  res.json({ success: true, message: "Logged out successfully" });
+    // 2. If refresh token exists, find its session
+    if (refreshToken) {
+      const session = validateRefreshSession(refreshToken);
+
+      // 3. Delete refresh session from server RAM
+      if (session) {
+        deleteRefreshSession(session.sessionId);
+
+        console.log(
+          `Refresh session deleted: ${session.sessionId}`
+        );
+      }
+    }
+
+    // 4. Clear access token cookie
+    res.clearCookie("access_token", {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite:
+        process.env.NODE_ENV === "production"
+          ? "None"
+          : "Lax",
+    });
+
+    // 5. Clear refresh token cookie
+    res.clearCookie("refresh_token", {
+      httpOnly: true,
+      secure: process.env.NODE_ENV === "production",
+      sameSite:
+        process.env.NODE_ENV === "production"
+          ? "None"
+          : "Lax",
+    });
+
+    // 6. Send response
+    return res.status(200).json({
+      success: true,
+      message: "Logged out successfully",
+    });
+
+  } catch (error) {
+    console.error("LOGOUT ERROR:", error);
+
+    return res.status(500).json({
+      success: false,
+      message: "Failed to logout",
+    });
+  }
 };

app/utils/jwt.util.js

@@ -13,7 +13,7 @@ const jwt = require("jsonwebtoken");
 require("dotenv").config();
 
 const JWT_SECRET = process.env.JWT_SECRET || "your_jwt_secret_key";
-const JWT_EXPIRES_IN = process.env.JWT_EXPIRES_IN || "1d"; // token validity
+const JWT_EXPIRES_IN = process.env.JWT_EXPIRES_IN || "15m"; // token validity
 
 const REFRESH_TOKEN_SECRET = process.env.REFRESH_TOKEN_SECRET || "your_refresh_token_secret_key";
 const REFRESH_TOKEN_DAYS = process.env.REFRESH_TOKEN_DAYS || "7d"; // refresh token validity