fix: auth service logout

Author: masb0ymas

src/controllers/Auth/controller.ts

@@ -68,10 +68,11 @@ routes.post(
   Authorization,
   asyncHandler(async function logout(req: Request, res: Response) {
     const { UserId } = req.getBody()
+    const userData = req.getState('user')
 
-    const message = await AuthService.logout(UserId)
+    const message = await AuthService.logout(UserId, userData)
     const buildResponse = BuildResponse.deleted({ message })
 
-    return res.status(200).json(buildResponse)
+    return res.clearCookie('token', { path: '/v1' }).json(buildResponse)
   })
 )

src/controllers/Auth/service.ts

@@ -156,13 +156,17 @@ class AuthService {
 
   /**
    *
-   * @param userId
+   * @param UserId
    */
-  public static async logout(userId: string) {
-    const userData = await UserService.getOne(userId)
+  public static async logout(UserId: string, userData: any) {
+    if (userData?.id !== UserId) {
+      throw new ResponseError.Unauthorized('Invalid user login!')
+    }
+
+    const data = await UserService.getOne(UserId)
 
     // remove refresh token by user id
-    await RefreshTokenService.delete(userData.id)
+    await RefreshTokenService.delete(data.id)
     const message = 'You have logged out of the application'
 
     return message